# Flog Txt Version 1 # Analyzer Version: 3.1.1 # Analyzer Build Date: Oct 15 2019 14:44:06 # Log Creation Date: 21.10.2019 16:33:55.613 Process: id = "1" image_name = "svchost.exe" filename = "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\svchost.exe" page_root = "0x4fdc2000" os_pid = "0x96c" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "analysis_target" parent_id = "0" os_parent_pid = "0x0" cmd_line = "\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\svchost.exe\" " cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 1 os_tid = 0x970 [0027.991] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x38fae4 | out: lpSystemTimeAsFileTime=0x38fae4*(dwLowDateTime=0x6452ee00, dwHighDateTime=0x1d5882d)) [0027.991] GetCurrentThreadId () returned 0x970 [0027.991] GetCurrentProcessId () returned 0x96c [0027.991] QueryPerformanceCounter (in: lpPerformanceCount=0x38fadc | out: lpPerformanceCount=0x38fadc*=14782330966) returned 1 [0028.011] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0028.011] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x0 [0028.011] GetLastError () returned 0x57 [0028.011] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x800) returned 0x0 [0028.011] GetLastError () returned 0x57 [0028.011] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x0) returned 0x76c20000 [0028.012] GetProcAddress (hModule=0x76c20000, lpProcName="InitializeCriticalSectionEx") returned 0x76c34d28 [0028.012] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x0 [0028.012] GetLastError () returned 0x57 [0028.012] GetProcAddress (hModule=0x76c20000, lpProcName="FlsAlloc") returned 0x76c34f2b [0028.012] GetProcAddress (hModule=0x76c20000, lpProcName="FlsSetValue") returned 0x76c34208 [0028.013] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x0 [0028.013] GetLastError () returned 0x57 [0028.013] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x800) returned 0x0 [0028.013] GetLastError () returned 0x57 [0028.013] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x0) returned 0x76c20000 [0028.013] GetProcAddress (hModule=0x76c20000, lpProcName="InitializeCriticalSectionEx") returned 0x76c34d28 [0028.013] GetProcessHeap () returned 0x530000 [0028.013] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x0 [0028.013] GetLastError () returned 0x57 [0028.013] GetProcAddress (hModule=0x76c20000, lpProcName="FlsAlloc") returned 0x76c34f2b [0028.013] GetLastError () returned 0x57 [0028.013] GetProcAddress (hModule=0x76c20000, lpProcName="FlsGetValue") returned 0x76c31252 [0028.014] GetProcAddress (hModule=0x76c20000, lpProcName="FlsSetValue") returned 0x76c34208 [0028.014] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x364) returned 0x545168 [0028.014] SetLastError (dwErrCode=0x57) [0028.014] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0xc00) returned 0x5454d8 [0028.016] GetStartupInfoW (in: lpStartupInfo=0x38fa18 | out: lpStartupInfo=0x38fa18*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\svchost.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x1a8660, hStdOutput=0x14ba2b88, hStdError=0xfffffffe)) [0028.016] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0028.016] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0028.016] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0028.016] GetCommandLineA () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\svchost.exe\" " [0028.016] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\svchost.exe\" " [0028.016] GetACP () returned 0x4e4 [0028.017] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x220) returned 0x5468e0 [0028.017] IsValidCodePage (CodePage=0x4e4) returned 1 [0028.017] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x38fa38 | out: lpCPInfo=0x38fa38) returned 1 [0028.017] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x38f300 | out: lpCPInfo=0x38f300) returned 1 [0028.017] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x38f914, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0028.017] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x38f914, cbMultiByte=256, lpWideCharStr=0x38f098, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ") returned 256 [0028.017] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ", cchSrc=256, lpCharType=0x38f314 | out: lpCharType=0x38f314) returned 1 [0028.017] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x38f914, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0028.017] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x38f914, cbMultiByte=256, lpWideCharStr=0x38f048, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0028.017] LoadLibraryExW (lpLibFileName="api-ms-win-core-localization-l1-2-1", hFile=0x0, dwFlags=0x800) returned 0x0 [0028.017] GetLastError () returned 0x57 [0028.017] GetProcAddress (hModule=0x76c20000, lpProcName="LCMapStringEx") returned 0x76cb47f1 [0028.017] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0028.017] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x38ee38, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ") returned 256 [0028.017] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ", cchWideChar=256, lpMultiByteStr=0x38f814, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ\x90\x1e\x9f\x14Pú8", lpUsedDefaultChar=0x0) returned 256 [0028.017] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x38f914, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0028.017] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x38f914, cbMultiByte=256, lpWideCharStr=0x38f068, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ") returned 256 [0028.017] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0028.017] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ", cchSrc=256, lpDestStr=0x38ee58, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȈ") returned 256 [0028.018] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȈ", cchWideChar=256, lpMultiByteStr=0x38f714, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞ\x9f \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ\x90\x1e\x9f\x14Pú8", lpUsedDefaultChar=0x0) returned 256 [0028.018] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x80) returned 0x546b08 [0028.018] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x1e94f0, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\svchost.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\svchost.exe")) returned 0x31 [0028.018] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x3a) returned 0x542110 [0028.018] RtlInitializeSListHead (in: ListHead=0x1e92b8 | out: ListHead=0x1e92b8) [0028.018] GetLastError () returned 0x0 [0028.018] SetLastError (dwErrCode=0x0) [0028.018] GetEnvironmentStringsW () returned 0x546b90* [0028.018] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1381 [0028.018] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x565) returned 0x547668 [0028.018] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x547668, cbMultiByte=1381, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ALLUSERSPROFILE=C:\\ProgramData", lpUsedDefaultChar=0x0) returned 1381 [0028.018] FreeEnvironmentStringsW (penv=0x546b90) returned 1 [0028.018] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x98) returned 0x547bd8 [0028.018] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x1f) returned 0x546558 [0028.018] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x36) returned 0x547c78 [0028.018] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x37) returned 0x547cb8 [0028.018] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x3c) returned 0x547cf8 [0028.019] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x31) returned 0x547d40 [0028.019] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x17) returned 0x542158 [0028.019] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x24) returned 0x547d80 [0028.019] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x14) returned 0x547db0 [0028.019] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0xd) returned 0x540238 [0028.019] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x25) returned 0x547dd0 [0028.019] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x39) returned 0x547e00 [0028.019] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x18) returned 0x547e48 [0028.019] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x17) returned 0x547e68 [0028.019] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0xe) returned 0x540250 [0028.019] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x69) returned 0x547e88 [0028.019] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x3e) returned 0x547f00 [0028.019] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x1b) returned 0x546580 [0028.019] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x1d) returned 0x5465a8 [0028.019] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x48) returned 0x547f48 [0028.019] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x12) returned 0x547f98 [0028.019] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x18) returned 0x547fb8 [0028.019] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x1b) returned 0x5465d0 [0028.019] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x24) returned 0x546b90 [0028.019] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x29) returned 0x546bc0 [0028.019] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x1e) returned 0x5465f8 [0028.019] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x41) returned 0x546bf8 [0028.019] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x17) returned 0x546c48 [0028.019] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0xf) returned 0x540268 [0028.019] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x16) returned 0x546c68 [0028.019] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x2a) returned 0x546c88 [0028.019] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x29) returned 0x546cc0 [0028.019] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x15) returned 0x546cf8 [0028.019] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x1e) returned 0x546620 [0028.019] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x2a) returned 0x546d18 [0028.019] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x12) returned 0x546d50 [0028.019] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x18) returned 0x546d70 [0028.020] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x46) returned 0x546d90 [0028.020] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547668 | out: hHeap=0x530000) returned 1 [0028.020] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0028.020] GetProcAddress (hModule=0x76c20000, lpProcName="FlsAlloc") returned 0x76c34f2b [0028.020] GetProcAddress (hModule=0x76c20000, lpProcName="FlsFree") returned 0x76c3359f [0028.020] GetProcAddress (hModule=0x76c20000, lpProcName="FlsGetValue") returned 0x76c31252 [0028.020] GetProcAddress (hModule=0x76c20000, lpProcName="FlsSetValue") returned 0x76c34208 [0028.020] GetProcAddress (hModule=0x76c20000, lpProcName="InitializeCriticalSectionEx") returned 0x76c34d28 [0028.020] GetProcAddress (hModule=0x76c20000, lpProcName="InitOnceExecuteOnce") returned 0x76c4d627 [0028.020] GetProcAddress (hModule=0x76c20000, lpProcName="CreateEventExW") returned 0x76cb410b [0028.020] GetProcAddress (hModule=0x76c20000, lpProcName="CreateSemaphoreW") returned 0x76c4ca5a [0028.020] GetProcAddress (hModule=0x76c20000, lpProcName="CreateSemaphoreExW") returned 0x76cb4195 [0028.021] GetProcAddress (hModule=0x76c20000, lpProcName="CreateThreadpoolTimer") returned 0x76c4ee7e [0028.021] GetProcAddress (hModule=0x76c20000, lpProcName="SetThreadpoolTimer") returned 0x7717441c [0028.021] GetProcAddress (hModule=0x76c20000, lpProcName="WaitForThreadpoolTimerCallbacks") returned 0x7719c50e [0028.021] GetProcAddress (hModule=0x76c20000, lpProcName="CloseThreadpoolTimer") returned 0x7719c381 [0028.021] GetProcAddress (hModule=0x76c20000, lpProcName="CreateThreadpoolWait") returned 0x76c4f088 [0028.021] GetProcAddress (hModule=0x76c20000, lpProcName="SetThreadpoolWait") returned 0x771805d7 [0028.021] GetProcAddress (hModule=0x76c20000, lpProcName="CloseThreadpoolWait") returned 0x7719ca24 [0028.021] GetProcAddress (hModule=0x76c20000, lpProcName="FlushProcessWriteBuffers") returned 0x77150b8c [0028.021] GetProcAddress (hModule=0x76c20000, lpProcName="FreeLibraryWhenCallbackReturns") returned 0x7720fde8 [0028.021] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentProcessorNumber") returned 0x771a1e1d [0028.022] GetProcAddress (hModule=0x76c20000, lpProcName="CreateSymbolicLinkW") returned 0x76cacd11 [0028.022] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentPackageId") returned 0x0 [0028.022] GetProcAddress (hModule=0x76c20000, lpProcName="GetTickCount64") returned 0x76c4eee0 [0028.022] GetProcAddress (hModule=0x76c20000, lpProcName="GetFileInformationByHandleEx") returned 0x76c4c78f [0028.022] GetProcAddress (hModule=0x76c20000, lpProcName="SetFileInformationByHandle") returned 0x76c5cbfc [0028.022] GetProcAddress (hModule=0x76c20000, lpProcName="GetSystemTimePreciseAsFileTime") returned 0x0 [0028.022] GetProcAddress (hModule=0x76c20000, lpProcName="InitializeConditionVariable") returned 0x77168456 [0028.022] GetProcAddress (hModule=0x76c20000, lpProcName="WakeConditionVariable") returned 0x771d7de4 [0028.022] GetProcAddress (hModule=0x76c20000, lpProcName="WakeAllConditionVariable") returned 0x7719409d [0028.022] GetProcAddress (hModule=0x76c20000, lpProcName="SleepConditionVariableCS") returned 0x76cb4b32 [0028.023] GetProcAddress (hModule=0x76c20000, lpProcName="InitializeSRWLock") returned 0x77168456 [0028.023] GetProcAddress (hModule=0x76c20000, lpProcName="AcquireSRWLockExclusive") returned 0x771629f1 [0028.023] GetProcAddress (hModule=0x76c20000, lpProcName="TryAcquireSRWLockExclusive") returned 0x77174892 [0028.023] GetProcAddress (hModule=0x76c20000, lpProcName="ReleaseSRWLockExclusive") returned 0x771629ab [0028.023] GetProcAddress (hModule=0x76c20000, lpProcName="SleepConditionVariableSRW") returned 0x76cb4b74 [0028.023] GetProcAddress (hModule=0x76c20000, lpProcName="CreateThreadpoolWork") returned 0x76c4ee45 [0028.023] GetProcAddress (hModule=0x76c20000, lpProcName="SubmitThreadpoolWork") returned 0x771a8491 [0028.023] GetProcAddress (hModule=0x76c20000, lpProcName="CloseThreadpoolWork") returned 0x7719d8e2 [0028.023] GetProcAddress (hModule=0x76c20000, lpProcName="CompareStringEx") returned 0x76cb46b1 [0028.023] GetProcAddress (hModule=0x76c20000, lpProcName="GetLocaleInfoEx") returned 0x76cb4751 [0028.023] GetProcAddress (hModule=0x76c20000, lpProcName="LCMapStringEx") returned 0x76cb47f1 [0028.024] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x800) returned 0x546de0 [0028.024] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0028.024] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x1a5534) returned 0x0 [0028.025] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8) returned 0x547fd8 [0028.025] GetProcAddress (hModule=0x76c20000, lpProcName="AreFileApisANSI") returned 0x76cb40d1 [0028.025] LoadLibraryExW (lpLibFileName="api-ms-win-core-string-l1-1-0", hFile=0x0, dwFlags=0x800) returned 0x0 [0028.025] GetLastError () returned 0x57 [0028.025] GetProcAddress (hModule=0x76c20000, lpProcName="CompareStringEx") returned 0x76cb46b1 [0028.025] GetProcAddress (hModule=0x76c20000, lpProcName="EnumSystemLocalesEx") returned 0x76cb424f [0028.025] LoadLibraryExW (lpLibFileName="api-ms-win-core-datetime-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x0 [0028.025] GetLastError () returned 0x57 [0028.025] GetProcAddress (hModule=0x76c20000, lpProcName="GetDateFormatEx") returned 0x76cc6676 [0028.026] GetProcAddress (hModule=0x76c20000, lpProcName="GetLocaleInfoEx") returned 0x76cb4751 [0028.026] GetProcAddress (hModule=0x76c20000, lpProcName="GetTimeFormatEx") returned 0x76cc65f1 [0028.026] GetProcAddress (hModule=0x76c20000, lpProcName="GetUserDefaultLocaleName") returned 0x76cb47c1 [0028.026] GetProcAddress (hModule=0x76c20000, lpProcName="IsValidLocaleName") returned 0x76cb47e1 [0028.026] LoadLibraryExW (lpLibFileName="api-ms-win-core-localization-obsolete-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x0 [0028.026] GetLastError () returned 0x57 [0028.026] GetProcAddress (hModule=0x76c20000, lpProcName="LCIDToLocaleName") returned 0x76c5ced4 [0028.026] GetProcAddress (hModule=0x76c20000, lpProcName="LocaleNameToLCID") returned 0x76cb4801 [0028.026] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20) returned 0x546800 [0028.026] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x2) returned 0x542178 [0028.027] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x542178 | out: hHeap=0x530000) returned 1 [0028.027] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x2) returned 0x542178 [0028.027] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8) returned 0x53fd88 [0028.027] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x18) returned 0x547a30 [0028.027] GetLastError () returned 0x57 [0028.027] SetLastError (dwErrCode=0x57) [0028.027] GetLastError () returned 0x57 [0028.027] SetLastError (dwErrCode=0x57) [0028.027] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0xb8) returned 0x547a50 [0028.027] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x6a6) returned 0x547fe8 [0028.027] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547fe8 | out: hHeap=0x530000) returned 1 [0028.028] GetLastError () returned 0x57 [0028.028] SetLastError (dwErrCode=0x57) [0028.028] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x6) returned 0x547b10 [0028.028] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x2) returned 0x547b20 [0028.028] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x4) returned 0x547b30 [0028.028] GetLastError () returned 0x57 [0028.028] SetLastError (dwErrCode=0x57) [0028.028] GetLastError () returned 0x57 [0028.028] SetLastError (dwErrCode=0x57) [0028.028] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0xb8) returned 0x547fe8 [0028.028] GetLastError () returned 0x57 [0028.028] SetLastError (dwErrCode=0x57) [0028.028] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x6a6) returned 0x5480a8 [0028.028] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5480a8 | out: hHeap=0x530000) returned 1 [0028.028] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547b10 | out: hHeap=0x530000) returned 1 [0028.028] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a50 | out: hHeap=0x530000) returned 1 [0028.028] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547b30 | out: hHeap=0x530000) returned 1 [0028.028] GetLastError () returned 0x57 [0028.028] SetLastError (dwErrCode=0x57) [0028.028] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x6) returned 0x547b30 [0028.028] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x2) returned 0x547b40 [0028.028] GetLastError () returned 0x57 [0028.029] SetLastError (dwErrCode=0x57) [0028.029] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x200) returned 0x5480a8 [0028.029] GetLastError () returned 0x57 [0028.029] SetLastError (dwErrCode=0x57) [0028.029] GetLastError () returned 0x57 [0028.029] SetLastError (dwErrCode=0x57) [0028.029] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x4) returned 0x547b50 [0028.029] GetLastError () returned 0x57 [0028.029] SetLastError (dwErrCode=0x57) [0028.029] GetLastError () returned 0x57 [0028.029] SetLastError (dwErrCode=0x57) [0028.029] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0xb8) returned 0x547a50 [0028.029] GetLastError () returned 0x57 [0028.029] SetLastError (dwErrCode=0x57) [0028.029] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x6a6) returned 0x5482b0 [0028.029] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5482b0 | out: hHeap=0x530000) returned 1 [0028.029] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547b30 | out: hHeap=0x530000) returned 1 [0028.029] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547fe8 | out: hHeap=0x530000) returned 1 [0028.029] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547b50 | out: hHeap=0x530000) returned 1 [0028.029] GetLastError () returned 0x57 [0028.029] SetLastError (dwErrCode=0x57) [0028.029] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x6) returned 0x547b30 [0028.030] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547b40 | out: hHeap=0x530000) returned 1 [0028.030] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547b20 | out: hHeap=0x530000) returned 1 [0028.030] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8) returned 0x547b10 [0028.030] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x40) returned 0x5482c8 [0028.031] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20) returned 0x546828 [0028.031] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20) returned 0x546850 [0028.031] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20) returned 0x546878 [0028.032] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20) returned 0x5468a0 [0028.032] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20) returned 0x5492c8 [0028.032] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20) returned 0x5492f0 [0028.032] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8bd3) returned 0x549ab0 [0028.033] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20) returned 0x549318 [0028.033] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20) returned 0x549340 [0028.033] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20) returned 0x549368 [0028.033] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20) returned 0x549390 [0028.033] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20) returned 0x5493b8 [0028.033] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20) returned 0x5493e0 [0028.033] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5492f0 | out: hHeap=0x530000) returned 1 [0028.033] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5492c8 | out: hHeap=0x530000) returned 1 [0028.033] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5468a0 | out: hHeap=0x530000) returned 1 [0028.033] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x546878 | out: hHeap=0x530000) returned 1 [0028.033] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x546850 | out: hHeap=0x530000) returned 1 [0028.033] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x546828 | out: hHeap=0x530000) returned 1 [0028.033] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20) returned 0x546828 [0028.033] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x30) returned 0x547b40 [0028.033] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x30) returned 0x547b78 [0028.033] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20) returned 0x546850 [0028.034] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x30) returned 0x547fe8 [0028.034] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547b40 | out: hHeap=0x530000) returned 1 [0028.034] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x546828 | out: hHeap=0x530000) returned 1 [0028.034] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x30) returned 0x547b40 [0028.034] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x200) returned 0x552690 [0028.034] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x200) returned 0x552898 [0028.034] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x200) returned 0x552aa0 [0028.034] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x400) returned 0x552ca8 [0028.034] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20) returned 0x546828 [0028.034] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x30) returned 0x548020 [0028.034] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x546828 | out: hHeap=0x530000) returned 1 [0028.034] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x47) returned 0x548058 [0028.034] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548020 | out: hHeap=0x530000) returned 1 [0028.034] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x6a) returned 0x5530b0 [0028.034] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548058 | out: hHeap=0x530000) returned 1 [0028.034] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x9e) returned 0x553128 [0028.034] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5530b0 | out: hHeap=0x530000) returned 1 [0028.034] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xec) returned 0x5531d0 [0028.034] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x553128 | out: hHeap=0x530000) returned 1 [0028.034] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x161) returned 0x5532c8 [0028.034] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5531d0 | out: hHeap=0x530000) returned 1 [0028.035] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x211) returned 0x553438 [0028.035] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5532c8 | out: hHeap=0x530000) returned 1 [0028.035] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ca8 | out: hHeap=0x530000) returned 1 [0028.035] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552aa0 | out: hHeap=0x530000) returned 1 [0028.035] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552898 | out: hHeap=0x530000) returned 1 [0028.035] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552690 | out: hHeap=0x530000) returned 1 [0028.035] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547b40 | out: hHeap=0x530000) returned 1 [0028.035] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x50) returned 0x548020 [0028.035] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20) returned 0x546828 [0028.035] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x30) returned 0x547b40 [0028.035] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x546828 | out: hHeap=0x530000) returned 1 [0028.035] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x47) returned 0x553658 [0028.035] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547b40 | out: hHeap=0x530000) returned 1 [0028.035] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x6a) returned 0x5536a8 [0028.035] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x553658 | out: hHeap=0x530000) returned 1 [0028.035] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x9e) returned 0x553720 [0028.035] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5536a8 | out: hHeap=0x530000) returned 1 [0028.035] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xec) returned 0x5537c8 [0028.035] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x553720 | out: hHeap=0x530000) returned 1 [0028.035] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x161) returned 0x553658 [0028.035] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5537c8 | out: hHeap=0x530000) returned 1 [0028.035] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548020 | out: hHeap=0x530000) returned 1 [0028.035] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x553438 | out: hHeap=0x530000) returned 1 [0028.035] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20) returned 0x546828 [0028.035] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x400) returned 0x5537c8 [0028.035] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5537c8 | out: hHeap=0x530000) returned 1 [0028.035] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x546828 | out: hHeap=0x530000) returned 1 [0028.035] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x30) returned 0x547b40 [0028.036] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x40) returned 0x548310 [0028.036] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20) returned 0x546828 [0028.036] AreFileApisANSI () returned 1 [0028.036] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x548310, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 54 [0028.036] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x6c) returned 0x548020 [0028.036] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x548310, cbMultiByte=-1, lpWideCharStr=0x548020, cchWideChar=54 | out: lpWideCharStr="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\ZL0.key") returned 54 [0028.036] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\ZL0.key" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\zl0.key"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0028.036] GetLastError () returned 0x2 [0028.036] SetLastError (dwErrCode=0x2) [0028.036] GetLastError () returned 0x2 [0028.036] SetLastError (dwErrCode=0x2) [0028.036] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\ZL0.key", nBufferLength=0x104, lpBuffer=0x38f5e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\ZL0.key", lpFilePart=0x0) returned 0x35 [0028.037] GetLastError () returned 0x2 [0028.037] SetLastError (dwErrCode=0x2) [0028.037] GetLastError () returned 0x2 [0028.037] SetLastError (dwErrCode=0x2) [0028.037] GetLastError () returned 0x2 [0028.037] SetLastError (dwErrCode=0x2) [0028.037] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548020 | out: hHeap=0x530000) returned 1 [0028.037] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8) returned 0x547b20 [0028.037] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8) returned 0x547bb0 [0028.037] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x38) returned 0x548020 [0028.037] AreFileApisANSI () returned 1 [0028.037] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x548310, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 54 [0028.037] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x6c) returned 0x5537c8 [0028.037] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x548310, cbMultiByte=-1, lpWideCharStr=0x5537c8, cchWideChar=54 | out: lpWideCharStr="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\ZL0.key") returned 54 [0028.037] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\ZL0.key" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\zl0.key"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x38f68c, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x54 [0028.039] GetFileType (hFile=0x54) returned 0x1 [0028.039] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5537c8 | out: hHeap=0x530000) returned 1 [0028.039] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8) returned 0x547bc0 [0028.039] GetLastError () returned 0x0 [0028.039] SetLastError (dwErrCode=0x0) [0028.039] GetLastError () returned 0x0 [0028.039] SetLastError (dwErrCode=0x0) [0028.039] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0xb8) returned 0x5537c8 [0028.039] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x6a6) returned 0x553888 [0028.039] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x553888 | out: hHeap=0x530000) returned 1 [0028.039] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547b30 | out: hHeap=0x530000) returned 1 [0028.039] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a50 | out: hHeap=0x530000) returned 1 [0028.039] GetLastError () returned 0x0 [0028.039] SetLastError (dwErrCode=0x0) [0028.039] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x6) returned 0x547b30 [0028.039] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x2) returned 0x548060 [0028.039] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x4) returned 0x548070 [0028.040] GetLastError () returned 0x0 [0028.040] SetLastError (dwErrCode=0x0) [0028.040] GetLastError () returned 0x0 [0028.040] SetLastError (dwErrCode=0x0) [0028.040] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0xb8) returned 0x547a50 [0028.040] GetLastError () returned 0x0 [0028.040] SetLastError (dwErrCode=0x0) [0028.040] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x6a6) returned 0x553888 [0028.040] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x553888 | out: hHeap=0x530000) returned 1 [0028.040] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547b30 | out: hHeap=0x530000) returned 1 [0028.040] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5537c8 | out: hHeap=0x530000) returned 1 [0028.040] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548070 | out: hHeap=0x530000) returned 1 [0028.040] GetLastError () returned 0x0 [0028.040] SetLastError (dwErrCode=0x0) [0028.040] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x6) returned 0x547b30 [0028.040] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x2) returned 0x548070 [0028.040] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x4) returned 0x548080 [0028.040] GetLastError () returned 0x0 [0028.040] SetLastError (dwErrCode=0x0) [0028.040] GetLastError () returned 0x0 [0028.040] SetLastError (dwErrCode=0x0) [0028.041] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0xb8) returned 0x5537c8 [0028.041] GetLastError () returned 0x0 [0028.041] SetLastError (dwErrCode=0x0) [0028.041] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x6a6) returned 0x553888 [0028.041] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x553888 | out: hHeap=0x530000) returned 1 [0028.041] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547b30 | out: hHeap=0x530000) returned 1 [0028.041] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a50 | out: hHeap=0x530000) returned 1 [0028.041] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548080 | out: hHeap=0x530000) returned 1 [0028.041] GetLastError () returned 0x0 [0028.041] SetLastError (dwErrCode=0x0) [0028.041] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x6) returned 0x547b30 [0028.041] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548070 | out: hHeap=0x530000) returned 1 [0028.041] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548060 | out: hHeap=0x530000) returned 1 [0028.041] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8) returned 0x548060 [0028.041] LoadLibraryExW (lpLibFileName="api-ms-win-security-systemfunctions-l1-1-0", hFile=0x0, dwFlags=0x800) returned 0x0 [0028.041] GetLastError () returned 0x57 [0028.041] LoadLibraryExW (lpLibFileName="advapi32", hFile=0x0, dwFlags=0x800) returned 0x0 [0028.041] GetLastError () returned 0x57 [0028.041] LoadLibraryExW (lpLibFileName="advapi32", hFile=0x0, dwFlags=0x0) returned 0x74d40000 [0028.041] GetProcAddress (hModule=0x74d40000, lpProcName="SystemFunction036") returned 0x74d41919 [0028.042] SystemFunction036 (in: RandomBuffer=0x38f814, RandomBufferLength=0x4 | out: RandomBuffer=0x38f814) returned 1 [0028.042] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20) returned 0x5494d0 [0028.042] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5494d0 | out: hHeap=0x530000) returned 1 [0028.042] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x553c38 [0028.042] GetLastError () returned 0x57 [0028.043] GetProcAddress (hModule=0x76c20000, lpProcName="FlsGetValue") returned 0x76c31252 [0028.043] SetLastError (dwErrCode=0x57) [0028.043] WriteFile (in: hFile=0x54, lpBuffer=0x38e36c*, nNumberOfBytesToWrite=0xf, lpNumberOfBytesWritten=0x38e364, lpOverlapped=0x0 | out: lpBuffer=0x38e36c*, lpNumberOfBytesWritten=0x38e364*=0xf, lpOverlapped=0x0) returned 1 [0028.044] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x553c38 | out: hHeap=0x530000) returned 1 [0028.044] CloseHandle (hObject=0x54) returned 1 [0028.046] GetLastError () returned 0x57 [0028.046] SetLastError (dwErrCode=0x57) [0028.046] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x553c38 [0028.046] GetLastError () returned 0x57 [0028.046] SetLastError (dwErrCode=0x57) [0028.046] GetLastError () returned 0x57 [0028.046] SetLastError (dwErrCode=0x57) [0028.046] GetLastError () returned 0x57 [0028.046] SetLastError (dwErrCode=0x57) [0028.047] GetLastError () returned 0x57 [0028.047] SetLastError (dwErrCode=0x57) [0028.047] GetLastError () returned 0x57 [0028.047] SetLastError (dwErrCode=0x57) [0028.047] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547bb0 | out: hHeap=0x530000) returned 1 [0028.047] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547b20 | out: hHeap=0x530000) returned 1 [0028.048] GetStartupInfoW (in: lpStartupInfo=0x38fa80 | out: lpStartupInfo=0x38fa80*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\svchost.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0)) [0028.048] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x38f294, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\svchost.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\svchost.exe")) returned 0x31 [0028.048] RegCreateKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Run", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x2001f, lpSecurityAttributes=0x0, phkResult=0x38f290, lpdwDisposition=0x0 | out: phkResult=0x38f290*=0x5c, lpdwDisposition=0x0) returned 0x0 [0028.049] RegSetValueExW (in: hKey=0x5c, lpValueName="MSFEEditor", Reserved=0x0, dwType=0x1, lpData="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\svchost.exe\" e", cbData=0x6c | out: lpData="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\svchost.exe\" e") returned 0x0 [0028.050] RegCloseKey (hKey=0x5c) returned 0x0 [0028.050] GetLogicalDriveStringsA (in: nBufferLength=0x100, lpBuffer=0x38f7a0 | out: lpBuffer="C:\\") returned 0x4 [0028.050] GetDriveTypeA (lpRootPathName="C:\\") returned 0x3 [0028.050] GetLastError () returned 0x0 [0028.050] SetLastError (dwErrCode=0x0) [0028.050] GetLastError () returned 0x0 [0028.050] SetLastError (dwErrCode=0x0) [0028.050] GetLastError () returned 0x0 [0028.050] SetLastError (dwErrCode=0x0) [0028.050] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x4) returned 0x547b20 [0028.050] lstrlenA (lpString="C:\\") returned 3 [0028.050] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x120) returned 0x552690 [0028.051] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x30) returned 0x548070 [0028.051] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8) returned 0x547bb0 [0028.051] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8) returned 0x547a50 [0028.051] AreFileApisANSI () returned 1 [0028.051] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x548070, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 33 [0028.051] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x42) returned 0x547a60 [0028.051] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x548070, cbMultiByte=-1, lpWideCharStr=0x547a60, cchWideChar=33 | out: lpWideCharStr="C:\\\\@@_OpenTheBrowserTOR_@@.html") returned 33 [0028.051] CreateFileW (lpFileName="C:\\\\@@_OpenTheBrowserTOR_@@.html" (normalized: "c:\\@@_openthebrowsertor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x38eb14, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c [0028.052] GetFileType (hFile=0x5c) returned 0x1 [0028.052] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a60 | out: hHeap=0x530000) returned 1 [0028.052] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x554c40 [0028.052] GetLastError () returned 0x0 [0028.052] SetLastError (dwErrCode=0x0) [0028.052] WriteFile (in: hFile=0x5c, lpBuffer=0x38d780*, nNumberOfBytesToWrite=0x11f, lpNumberOfBytesWritten=0x38d778, lpOverlapped=0x0 | out: lpBuffer=0x38d780*, lpNumberOfBytesWritten=0x38d778*=0x11f, lpOverlapped=0x0) returned 1 [0028.053] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x554c40 | out: hHeap=0x530000) returned 1 [0028.053] CloseHandle (hObject=0x5c) returned 1 [0028.054] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a50 | out: hHeap=0x530000) returned 1 [0028.054] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547bb0 | out: hHeap=0x530000) returned 1 [0028.054] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548070 | out: hHeap=0x530000) returned 1 [0028.054] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x30) returned 0x548070 [0028.054] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8) returned 0x547bb0 [0028.055] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8) returned 0x547a50 [0028.055] AreFileApisANSI () returned 1 [0028.055] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x548070, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 38 [0028.055] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x4c) returned 0x547a60 [0028.055] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x548070, cbMultiByte=-1, lpWideCharStr=0x547a60, cchWideChar=38 | out: lpWideCharStr="C:\\\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html") returned 38 [0028.055] CreateFileW (lpFileName="C:\\\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html" (normalized: "c:\\@@_îòêðûòü_â_áðàóçåðå_tor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x38eb14, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c [0028.055] GetFileType (hFile=0x5c) returned 0x1 [0028.055] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a60 | out: hHeap=0x530000) returned 1 [0028.056] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x554c40 [0028.056] GetLastError () returned 0x0 [0028.056] SetLastError (dwErrCode=0x0) [0028.056] WriteFile (in: hFile=0x5c, lpBuffer=0x38d780*, nNumberOfBytesToWrite=0x11f, lpNumberOfBytesWritten=0x38d778, lpOverlapped=0x0 | out: lpBuffer=0x38d780*, lpNumberOfBytesWritten=0x38d778*=0x11f, lpOverlapped=0x0) returned 1 [0028.057] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x554c40 | out: hHeap=0x530000) returned 1 [0028.057] CloseHandle (hObject=0x5c) returned 1 [0028.057] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a50 | out: hHeap=0x530000) returned 1 [0028.057] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547bb0 | out: hHeap=0x530000) returned 1 [0028.057] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548070 | out: hHeap=0x530000) returned 1 [0028.057] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552690 | out: hHeap=0x530000) returned 1 [0028.057] FindFirstFileA (in: lpFileName="C:\\\\*", lpFindFileData=0x38ee14 | out: lpFindFileData=0x38ee14*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x77000275, dwReserved1=0x1f9, cFileName="$Recycle.Bin", cAlternateFileName="")) returned 0x547a50 [0028.057] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20) returned 0x5494f8 [0028.058] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20) returned 0x549520 [0028.058] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x549520 | out: hHeap=0x530000) returned 1 [0028.058] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5494f8 | out: hHeap=0x530000) returned 1 [0028.058] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20) returned 0x5494f8 [0028.058] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x120) returned 0x552690 [0028.058] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20) returned 0x549520 [0028.058] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x30) returned 0x548070 [0028.058] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x549520 | out: hHeap=0x530000) returned 1 [0028.058] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8) returned 0x547bb0 [0028.058] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8) returned 0x547a90 [0028.058] AreFileApisANSI () returned 1 [0028.058] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x548070, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 46 [0028.058] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x5c) returned 0x547aa0 [0028.058] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x548070, cbMultiByte=-1, lpWideCharStr=0x547aa0, cchWideChar=46 | out: lpWideCharStr="C:\\\\$Recycle.Bin\\@@_OpenTheBrowserTOR_@@.html") returned 46 [0028.058] CreateFileW (lpFileName="C:\\\\$Recycle.Bin\\@@_OpenTheBrowserTOR_@@.html" (normalized: "c:\\$recycle.bin\\@@_openthebrowsertor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x38e1b0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60 [0028.061] GetFileType (hFile=0x60) returned 0x1 [0028.061] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547aa0 | out: hHeap=0x530000) returned 1 [0028.061] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x554c40 [0028.061] GetLastError () returned 0x0 [0028.061] SetLastError (dwErrCode=0x0) [0028.061] WriteFile (in: hFile=0x60, lpBuffer=0x38ce1c*, nNumberOfBytesToWrite=0x11f, lpNumberOfBytesWritten=0x38ce14, lpOverlapped=0x0 | out: lpBuffer=0x38ce1c*, lpNumberOfBytesWritten=0x38ce14*=0x11f, lpOverlapped=0x0) returned 1 [0028.062] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x554c40 | out: hHeap=0x530000) returned 1 [0028.062] CloseHandle (hObject=0x60) returned 1 [0028.072] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0028.072] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547bb0 | out: hHeap=0x530000) returned 1 [0028.073] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548070 | out: hHeap=0x530000) returned 1 [0028.073] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20) returned 0x549520 [0028.073] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x40) returned 0x548358 [0028.073] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x549520 | out: hHeap=0x530000) returned 1 [0028.073] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8) returned 0x547bb0 [0028.073] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8) returned 0x548070 [0028.073] AreFileApisANSI () returned 1 [0028.073] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x548358, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 51 [0028.073] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x66) returned 0x547a90 [0028.073] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x548358, cbMultiByte=-1, lpWideCharStr=0x547a90, cchWideChar=51 | out: lpWideCharStr="C:\\\\$Recycle.Bin\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html") returned 51 [0028.073] CreateFileW (lpFileName="C:\\\\$Recycle.Bin\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html" (normalized: "c:\\$recycle.bin\\@@_îòêðûòü_â_áðàóçåðå_tor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x38e1b0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60 [0028.083] GetFileType (hFile=0x60) returned 0x1 [0028.083] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0028.083] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x554c40 [0028.083] GetLastError () returned 0x0 [0028.083] SetLastError (dwErrCode=0x0) [0028.083] WriteFile (in: hFile=0x60, lpBuffer=0x38ce1c*, nNumberOfBytesToWrite=0x11f, lpNumberOfBytesWritten=0x38ce14, lpOverlapped=0x0 | out: lpBuffer=0x38ce1c*, lpNumberOfBytesWritten=0x38ce14*=0x11f, lpOverlapped=0x0) returned 1 [0028.084] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x554c40 | out: hHeap=0x530000) returned 1 [0028.085] CloseHandle (hObject=0x60) returned 1 [0028.085] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548070 | out: hHeap=0x530000) returned 1 [0028.085] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547bb0 | out: hHeap=0x530000) returned 1 [0028.085] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548358 | out: hHeap=0x530000) returned 1 [0028.085] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552690 | out: hHeap=0x530000) returned 1 [0028.085] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5494f8 | out: hHeap=0x530000) returned 1 [0028.085] FindFirstFileA (in: lpFileName="C:\\\\$Recycle.Bin\\*", lpFindFileData=0x38e4b0 | out: lpFindFileData=0x38e4b0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x64613640, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x64613640, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x77000275, dwReserved1=0x1f9, cFileName=".", cAlternateFileName="")) returned 0x547a90 [0028.085] FindNextFileA (in: hFindFile=0x547a90, lpFindFileData=0x38e4b0 | out: lpFindFileData=0x38e4b0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x64613640, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x64613640, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x77000275, dwReserved1=0x1f9, cFileName="..", cAlternateFileName="")) returned 1 [0028.085] FindNextFileA (in: hFindFile=0x547a90, lpFindFileData=0x38e4b0 | out: lpFindFileData=0x38e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x645c7380, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x645c7380, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x645c7380, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x77000275, dwReserved1=0x1f9, cFileName="@@_OpenTheBrowserTOR_@@.html", cAlternateFileName="@@_OPE~1.HTM")) returned 1 [0028.085] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x30) returned 0x548070 [0028.085] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x30) returned 0x547ad0 [0028.086] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547ad0 | out: hHeap=0x530000) returned 1 [0028.086] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20) returned 0x549520 [0028.086] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x549520 | out: hHeap=0x530000) returned 1 [0028.086] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548070 | out: hHeap=0x530000) returned 1 [0028.086] FindNextFileA (in: hFindFile=0x547a90, lpFindFileData=0x38e4b0 | out: lpFindFileData=0x38e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x645ed4e0, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x645ed4e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x64613640, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x530000, dwReserved1=0x547ac8, cFileName="@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html", cAlternateFileName="@@____~1.HTM")) returned 1 [0028.086] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x40) returned 0x548358 [0028.086] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x40) returned 0x5483a0 [0028.086] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5483a0 | out: hHeap=0x530000) returned 1 [0028.086] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x30) returned 0x548070 [0028.086] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548070 | out: hHeap=0x530000) returned 1 [0028.086] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548358 | out: hHeap=0x530000) returned 1 [0028.086] FindNextFileA (in: hFindFile=0x547a90, lpFindFileData=0x38e4b0 | out: lpFindFileData=0x38e4b0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb63e4b00, ftLastAccessTime.dwHighDateTime=0x1d337f4, ftLastWriteTime.dwLowDateTime=0xb63e4b00, ftLastWriteTime.dwHighDateTime=0x1d337f4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x38e338, dwReserved1=0x77163c74, cFileName="S-1-5-21-3388679973-3930757225-3770151564-1000", cAlternateFileName="S-1-5-~1")) returned 1 [0028.086] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x40) returned 0x548358 [0028.086] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x40) returned 0x5483a0 [0028.086] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x40) returned 0x5483e8 [0028.086] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5483a0 | out: hHeap=0x530000) returned 1 [0028.086] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5483e8 | out: hHeap=0x530000) returned 1 [0028.086] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548358 | out: hHeap=0x530000) returned 1 [0028.086] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x40) returned 0x548358 [0028.086] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x120) returned 0x555c48 [0028.086] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x50) returned 0x555d70 [0028.086] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x77) returned 0x5422e8 [0028.086] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x555d70 | out: hHeap=0x530000) returned 1 [0028.086] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8) returned 0x547bb0 [0028.086] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8) returned 0x548070 [0028.087] AreFileApisANSI () returned 1 [0028.087] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5422e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0028.087] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xba) returned 0x555d70 [0028.087] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5422e8, cbMultiByte=-1, lpWideCharStr=0x555d70, cchWideChar=93 | out: lpWideCharStr="C:\\\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\@@_OpenTheBrowserTOR_@@.html") returned 93 [0028.087] CreateFileW (lpFileName="C:\\\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\@@_OpenTheBrowserTOR_@@.html" (normalized: "c:\\$recycle.bin\\s-1-5-21-3388679973-3930757225-3770151564-1000\\@@_openthebrowsertor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x38d84c, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x64 [0028.087] GetFileType (hFile=0x64) returned 0x1 [0028.087] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x555d70 | out: hHeap=0x530000) returned 1 [0028.088] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x555d70 [0028.088] GetLastError () returned 0x0 [0028.088] SetLastError (dwErrCode=0x0) [0028.088] WriteFile (in: hFile=0x64, lpBuffer=0x38c4b8*, nNumberOfBytesToWrite=0x11f, lpNumberOfBytesWritten=0x38c4b0, lpOverlapped=0x0 | out: lpBuffer=0x38c4b8*, lpNumberOfBytesWritten=0x38c4b0*=0x11f, lpOverlapped=0x0) returned 1 [0028.089] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x555d70 | out: hHeap=0x530000) returned 1 [0028.089] CloseHandle (hObject=0x64) returned 1 [0028.090] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548070 | out: hHeap=0x530000) returned 1 [0028.090] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547bb0 | out: hHeap=0x530000) returned 1 [0028.090] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5422e8 | out: hHeap=0x530000) returned 1 [0028.090] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x50) returned 0x552690 [0028.090] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x77) returned 0x5422e8 [0028.090] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552690 | out: hHeap=0x530000) returned 1 [0028.090] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8) returned 0x547bb0 [0028.090] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8) returned 0x548070 [0028.090] AreFileApisANSI () returned 1 [0028.090] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5422e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 98 [0028.090] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xc4) returned 0x552690 [0028.090] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5422e8, cbMultiByte=-1, lpWideCharStr=0x552690, cchWideChar=98 | out: lpWideCharStr="C:\\\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html") returned 98 [0028.090] CreateFileW (lpFileName="C:\\\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html" (normalized: "c:\\$recycle.bin\\s-1-5-21-3388679973-3930757225-3770151564-1000\\@@_îòêðûòü_â_áðàóçåðå_tor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x38d84c, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x64 [0028.091] GetFileType (hFile=0x64) returned 0x1 [0028.091] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552690 | out: hHeap=0x530000) returned 1 [0028.091] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x555d70 [0028.091] GetLastError () returned 0x0 [0028.091] SetLastError (dwErrCode=0x0) [0028.091] WriteFile (in: hFile=0x64, lpBuffer=0x38c4b8*, nNumberOfBytesToWrite=0x11f, lpNumberOfBytesWritten=0x38c4b0, lpOverlapped=0x0 | out: lpBuffer=0x38c4b8*, lpNumberOfBytesWritten=0x38c4b0*=0x11f, lpOverlapped=0x0) returned 1 [0028.092] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x555d70 | out: hHeap=0x530000) returned 1 [0028.092] CloseHandle (hObject=0x64) returned 1 [0028.093] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548070 | out: hHeap=0x530000) returned 1 [0028.093] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547bb0 | out: hHeap=0x530000) returned 1 [0028.093] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5422e8 | out: hHeap=0x530000) returned 1 [0028.093] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x555c48 | out: hHeap=0x530000) returned 1 [0028.093] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548358 | out: hHeap=0x530000) returned 1 [0028.093] FindFirstFileA (in: lpFileName="C:\\\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\*", lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64613640, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x64613640, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4b00044f, dwReserved1=0x474, cFileName=".", cAlternateFileName="")) returned 0x547ad0 [0028.093] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64613640, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x64613640, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4b00044f, dwReserved1=0x474, cFileName="..", cAlternateFileName="")) returned 1 [0028.093] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64613640, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x64613640, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x64613640, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x4b00044f, dwReserved1=0x474, cFileName="@@_OpenTheBrowserTOR_@@.html", cAlternateFileName="@@_OPE~1.HTM")) returned 1 [0028.093] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x60) returned 0x552690 [0028.093] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x60) returned 0x5526f8 [0028.093] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5526f8 | out: hHeap=0x530000) returned 1 [0028.093] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20) returned 0x549548 [0028.093] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x549548 | out: hHeap=0x530000) returned 1 [0028.093] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552690 | out: hHeap=0x530000) returned 1 [0028.093] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64613640, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x64613640, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x64613640, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x530000, dwReserved1=0x5526f0, cFileName="@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html", cAlternateFileName="@@____~1.HTM")) returned 1 [0028.093] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x70) returned 0x552690 [0028.093] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x70) returned 0x552708 [0028.094] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552708 | out: hHeap=0x530000) returned 1 [0028.094] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x30) returned 0x548070 [0028.094] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548070 | out: hHeap=0x530000) returned 1 [0028.094] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552690 | out: hHeap=0x530000) returned 1 [0028.094] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x38d9d4, dwReserved1=0x77163c74, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0028.094] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x50) returned 0x552690 [0028.094] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x50) returned 0x5526e8 [0028.094] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5526e8 | out: hHeap=0x530000) returned 1 [0028.094] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552690 | out: hHeap=0x530000) returned 1 [0028.094] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x38d9d4, dwReserved1=0x77163c74, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0028.094] FindClose (in: hFindFile=0x547ad0 | out: hFindFile=0x547ad0) returned 1 [0028.094] FindNextFileA (in: hFindFile=0x547a90, lpFindFileData=0x38e4b0 | out: lpFindFileData=0x38e4b0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb63e4b00, ftLastAccessTime.dwHighDateTime=0x1d337f4, ftLastWriteTime.dwLowDateTime=0xb63e4b00, ftLastWriteTime.dwHighDateTime=0x1d337f4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x38e338, dwReserved1=0x77163c74, cFileName="S-1-5-21-3388679973-3930757225-3770151564-1000", cAlternateFileName="S-1-5-~1")) returned 0 [0028.094] FindClose (in: hFindFile=0x547a90 | out: hFindFile=0x547a90) returned 1 [0028.094] FindNextFileA (in: hFindFile=0x547a50, lpFindFileData=0x38ee14 | out: lpFindFileData=0x38ee14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x645c7380, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x645c7380, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x645c7380, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x77000275, dwReserved1=0x1f9, cFileName="@@_OpenTheBrowserTOR_@@.html", cAlternateFileName="@@_OPE~1.HTM")) returned 1 [0028.094] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x30) returned 0x548070 [0028.094] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x30) returned 0x547a90 [0028.094] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0028.094] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20) returned 0x549548 [0028.094] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x549548 | out: hHeap=0x530000) returned 1 [0028.094] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548070 | out: hHeap=0x530000) returned 1 [0028.094] FindNextFileA (in: hFindFile=0x547a50, lpFindFileData=0x38ee14 | out: lpFindFileData=0x38ee14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x645c7380, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x645c7380, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x645c7380, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x530000, dwReserved1=0x547a88, cFileName="@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html", cAlternateFileName="@@____~1.HTM")) returned 1 [0028.094] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x30) returned 0x548070 [0028.095] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x30) returned 0x547a90 [0028.095] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0028.095] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x30) returned 0x547a90 [0028.095] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0028.095] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548070 | out: hHeap=0x530000) returned 1 [0028.095] FindNextFileA (in: hFindFile=0x547a50, lpFindFileData=0x38ee14 | out: lpFindFileData=0x38ee14*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x38ec9c, dwReserved1=0x77163c74, cFileName="Boot", cAlternateFileName="")) returned 1 [0028.095] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x120) returned 0x552690 [0028.095] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x30) returned 0x548070 [0028.095] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8) returned 0x547bb0 [0028.095] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8) returned 0x547a90 [0028.095] AreFileApisANSI () returned 1 [0028.095] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x548070, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 38 [0028.095] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x4c) returned 0x547aa0 [0028.095] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x548070, cbMultiByte=-1, lpWideCharStr=0x547aa0, cchWideChar=38 | out: lpWideCharStr="C:\\\\Boot\\@@_OpenTheBrowserTOR_@@.html") returned 38 [0028.095] CreateFileW (lpFileName="C:\\\\Boot\\@@_OpenTheBrowserTOR_@@.html" (normalized: "c:\\boot\\@@_openthebrowsertor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x38e1b0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60 [0028.097] GetFileType (hFile=0x60) returned 0x1 [0028.097] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547aa0 | out: hHeap=0x530000) returned 1 [0028.098] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x555c48 [0028.098] GetLastError () returned 0x0 [0028.098] SetLastError (dwErrCode=0x0) [0028.098] WriteFile (in: hFile=0x60, lpBuffer=0x38ce1c*, nNumberOfBytesToWrite=0x11f, lpNumberOfBytesWritten=0x38ce14, lpOverlapped=0x0 | out: lpBuffer=0x38ce1c*, lpNumberOfBytesWritten=0x38ce14*=0x11f, lpOverlapped=0x0) returned 1 [0028.099] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x555c48 | out: hHeap=0x530000) returned 1 [0028.099] CloseHandle (hObject=0x60) returned 1 [0028.099] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0028.099] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547bb0 | out: hHeap=0x530000) returned 1 [0028.099] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548070 | out: hHeap=0x530000) returned 1 [0028.099] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x30) returned 0x548070 [0028.100] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8) returned 0x547bb0 [0028.100] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8) returned 0x547a90 [0028.100] AreFileApisANSI () returned 1 [0028.100] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x548070, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 43 [0028.100] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x56) returned 0x547aa0 [0028.100] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x548070, cbMultiByte=-1, lpWideCharStr=0x547aa0, cchWideChar=43 | out: lpWideCharStr="C:\\\\Boot\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html") returned 43 [0028.100] CreateFileW (lpFileName="C:\\\\Boot\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html" (normalized: "c:\\boot\\@@_îòêðûòü_â_áðàóçåðå_tor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x38e1b0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60 [0028.100] GetFileType (hFile=0x60) returned 0x1 [0028.101] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547aa0 | out: hHeap=0x530000) returned 1 [0028.101] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x555c48 [0028.101] GetLastError () returned 0x0 [0028.101] SetLastError (dwErrCode=0x0) [0028.101] WriteFile (in: hFile=0x60, lpBuffer=0x38ce1c*, nNumberOfBytesToWrite=0x11f, lpNumberOfBytesWritten=0x38ce14, lpOverlapped=0x0 | out: lpBuffer=0x38ce1c*, lpNumberOfBytesWritten=0x38ce14*=0x11f, lpOverlapped=0x0) returned 1 [0028.102] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x555c48 | out: hHeap=0x530000) returned 1 [0028.102] CloseHandle (hObject=0x60) returned 1 [0028.103] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0028.103] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547bb0 | out: hHeap=0x530000) returned 1 [0028.103] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548070 | out: hHeap=0x530000) returned 1 [0028.103] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552690 | out: hHeap=0x530000) returned 1 [0028.103] FindFirstFileA (in: lpFileName="C:\\\\Boot\\*", lpFindFileData=0x38e4b0 | out: lpFindFileData=0x38e4b0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x646397a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x646397a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x70000474, dwReserved1=0x1f9, cFileName=".", cAlternateFileName="")) returned 0x547a90 [0028.103] FindNextFileA (in: hFindFile=0x547a90, lpFindFileData=0x38e4b0 | out: lpFindFileData=0x38e4b0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x646397a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x646397a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x70000474, dwReserved1=0x1f9, cFileName="..", cAlternateFileName="")) returned 1 [0028.103] FindNextFileA (in: hFindFile=0x547a90, lpFindFileData=0x38e4b0 | out: lpFindFileData=0x38e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x646397a0, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x646397a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x646397a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x70000474, dwReserved1=0x1f9, cFileName="@@_OpenTheBrowserTOR_@@.html", cAlternateFileName="@@_OPE~1.HTM")) returned 1 [0028.103] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x30) returned 0x548070 [0028.103] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x30) returned 0x547ad0 [0028.103] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547ad0 | out: hHeap=0x530000) returned 1 [0028.103] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20) returned 0x549548 [0028.103] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x549548 | out: hHeap=0x530000) returned 1 [0028.103] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548070 | out: hHeap=0x530000) returned 1 [0028.103] FindNextFileA (in: hFindFile=0x547a90, lpFindFileData=0x38e4b0 | out: lpFindFileData=0x38e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x646397a0, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x646397a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x646397a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x530000, dwReserved1=0x547ac8, cFileName="@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html", cAlternateFileName="@@____~1.HTM")) returned 1 [0028.103] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x30) returned 0x548070 [0028.103] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x30) returned 0x547ad0 [0028.103] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547ad0 | out: hHeap=0x530000) returned 1 [0028.103] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x30) returned 0x547ad0 [0028.103] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547ad0 | out: hHeap=0x530000) returned 1 [0028.103] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548070 | out: hHeap=0x530000) returned 1 [0028.103] FindNextFileA (in: hFindFile=0x547a90, lpFindFileData=0x38e4b0 | out: lpFindFileData=0x38e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac2e8a60, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x2ebf9340, ftLastAccessTime.dwHighDateTime=0x1d4d597, ftLastWriteTime.dwLowDateTime=0x2ebf9340, ftLastWriteTime.dwHighDateTime=0x1d4d597, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0x38e338, dwReserved1=0x77163c74, cFileName="BCD", cAlternateFileName="")) returned 1 [0028.103] FindNextFileA (in: hFindFile=0x547a90, lpFindFileData=0x38e4b0 | out: lpFindFileData=0x38e4b0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac2e8a60, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac2e8a60, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x469b3b00, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x5400, dwReserved0=0x38e338, dwReserved1=0x77163c74, cFileName="BCD.LOG", cAlternateFileName="")) returned 1 [0028.104] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20) returned 0x549548 [0028.104] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20) returned 0x549570 [0028.104] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x549570 | out: hHeap=0x530000) returned 1 [0028.104] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x549548 | out: hHeap=0x530000) returned 1 [0028.104] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8) returned 0x547bb0 [0028.104] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8) returned 0x548070 [0028.104] AreFileApisANSI () returned 1 [0028.104] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38e9f0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 17 [0028.104] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x22) returned 0x547ad0 [0028.104] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38e9f0, cbMultiByte=-1, lpWideCharStr=0x547ad0, cchWideChar=17 | out: lpWideCharStr="C:\\\\Boot\\BCD.LOG") returned 17 [0028.104] CreateFileW (lpFileName="C:\\\\Boot\\BCD.LOG" (normalized: "c:\\boot\\bcd.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x38e164, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0028.105] GetLastError () returned 0x20 [0028.105] GetLastError () returned 0x20 [0028.105] SetLastError (dwErrCode=0x20) [0028.105] GetLastError () returned 0x20 [0028.105] SetLastError (dwErrCode=0x20) [0028.105] GetLastError () returned 0x20 [0028.105] SetLastError (dwErrCode=0x20) [0028.105] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547ad0 | out: hHeap=0x530000) returned 1 [0028.105] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548070 | out: hHeap=0x530000) returned 1 [0028.105] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547bb0 | out: hHeap=0x530000) returned 1 [0028.105] FindNextFileA (in: hFindFile=0x547a90, lpFindFileData=0x38e4b0 | out: lpFindFileData=0x38e4b0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac30ebc0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffffffe, dwReserved1=0x7716387a, cFileName="BCD.LOG1", cAlternateFileName="BCD~1.LOG")) returned 1 [0028.105] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20) returned 0x549548 [0028.105] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20) returned 0x549570 [0028.105] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x549570 | out: hHeap=0x530000) returned 1 [0028.105] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x549548 | out: hHeap=0x530000) returned 1 [0028.105] FindNextFileA (in: hFindFile=0x547a90, lpFindFileData=0x38e4b0 | out: lpFindFileData=0x38e4b0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac30ebc0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffffffe, dwReserved1=0x7716387a, cFileName="BCD.LOG2", cAlternateFileName="BCD~2.LOG")) returned 1 [0028.105] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20) returned 0x549548 [0028.105] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20) returned 0x549570 [0028.105] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x549570 | out: hHeap=0x530000) returned 1 [0028.106] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x549548 | out: hHeap=0x530000) returned 1 [0028.106] FindNextFileA (in: hFindFile=0x547a90, lpFindFileData=0x38e4b0 | out: lpFindFileData=0x38e4b0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0xfffffffe, dwReserved1=0x7716387a, cFileName="BOOTSTAT.DAT", cAlternateFileName="")) returned 1 [0028.106] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20) returned 0x549548 [0028.106] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20) returned 0x549570 [0028.106] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x549570 | out: hHeap=0x530000) returned 1 [0028.106] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x549548 | out: hHeap=0x530000) returned 1 [0028.106] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8) returned 0x547bb0 [0028.106] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8) returned 0x548070 [0028.106] AreFileApisANSI () returned 1 [0028.106] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38e9f0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 22 [0028.106] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x2c) returned 0x547ad0 [0028.106] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38e9f0, cbMultiByte=-1, lpWideCharStr=0x547ad0, cchWideChar=22 | out: lpWideCharStr="C:\\\\Boot\\BOOTSTAT.DAT") returned 22 [0028.106] CreateFileW (lpFileName="C:\\\\Boot\\BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x38e164, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x64 [0028.111] GetFileType (hFile=0x64) returned 0x1 [0028.119] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547ad0 | out: hHeap=0x530000) returned 1 [0028.119] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1b0 | out: lpNewFilePointer=0x0) returned 1 [0028.119] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e164 | out: lpNewFilePointer=0x0) returned 1 [0028.119] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e198 | out: lpNewFilePointer=0x0) returned 1 [0028.119] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e180 | out: lpNewFilePointer=0x0) returned 1 [0028.119] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e144 | out: lpNewFilePointer=0x0) returned 1 [0028.120] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e198 | out: lpNewFilePointer=0x0) returned 1 [0028.120] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e180 | out: lpNewFilePointer=0x0) returned 1 [0028.120] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e144 | out: lpNewFilePointer=0x0) returned 1 [0028.120] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x556c50 [0028.120] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.123] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1f4 | out: lpNewFilePointer=0x0) returned 1 [0028.123] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1b8 | out: lpNewFilePointer=0x0) returned 1 [0028.123] GetLastError () returned 0x0 [0028.123] SetLastError (dwErrCode=0x0) [0028.123] GetLastError () returned 0x0 [0028.123] SetLastError (dwErrCode=0x0) [0028.123] WriteFile (in: hFile=0x64, lpBuffer=0x556c50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x38e124, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesWritten=0x38e124*=0x8, lpOverlapped=0x0) returned 1 [0028.124] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e180 | out: lpNewFilePointer=0x0) returned 1 [0028.124] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e114 | out: lpNewFilePointer=0x0) returned 1 [0028.124] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x8, lpNewFilePointer=0x0, dwMoveMethod=0x38e190 | out: lpNewFilePointer=0x0) returned 1 [0028.124] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e144 | out: lpNewFilePointer=0x0) returned 1 [0028.124] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.124] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1f4 | out: lpNewFilePointer=0x0) returned 1 [0028.124] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e188 | out: lpNewFilePointer=0x0) returned 1 [0028.124] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x8, lpNewFilePointer=0x0, dwMoveMethod=0x38e204 | out: lpNewFilePointer=0x0) returned 1 [0028.125] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1b8 | out: lpNewFilePointer=0x0) returned 1 [0028.125] GetLastError () returned 0x0 [0028.125] SetLastError (dwErrCode=0x0) [0028.125] GetLastError () returned 0x0 [0028.125] SetLastError (dwErrCode=0x0) [0028.125] WriteFile (in: hFile=0x64, lpBuffer=0x556c50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x38e124, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesWritten=0x38e124*=0x8, lpOverlapped=0x0) returned 1 [0028.125] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e180 | out: lpNewFilePointer=0x0) returned 1 [0028.126] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e114 | out: lpNewFilePointer=0x0) returned 1 [0028.126] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x10, lpNewFilePointer=0x0, dwMoveMethod=0x38e190 | out: lpNewFilePointer=0x0) returned 1 [0028.126] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e144 | out: lpNewFilePointer=0x0) returned 1 [0028.126] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.126] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1f4 | out: lpNewFilePointer=0x0) returned 1 [0028.126] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e188 | out: lpNewFilePointer=0x0) returned 1 [0028.126] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x10, lpNewFilePointer=0x0, dwMoveMethod=0x38e204 | out: lpNewFilePointer=0x0) returned 1 [0028.126] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1b8 | out: lpNewFilePointer=0x0) returned 1 [0028.127] GetLastError () returned 0x0 [0028.127] SetLastError (dwErrCode=0x0) [0028.127] GetLastError () returned 0x0 [0028.127] SetLastError (dwErrCode=0x0) [0028.127] WriteFile (in: hFile=0x64, lpBuffer=0x556c50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x38e124, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesWritten=0x38e124*=0x8, lpOverlapped=0x0) returned 1 [0028.127] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e180 | out: lpNewFilePointer=0x0) returned 1 [0028.127] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e114 | out: lpNewFilePointer=0x0) returned 1 [0028.128] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x18, lpNewFilePointer=0x0, dwMoveMethod=0x38e190 | out: lpNewFilePointer=0x0) returned 1 [0028.128] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e144 | out: lpNewFilePointer=0x0) returned 1 [0028.128] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.128] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1f4 | out: lpNewFilePointer=0x0) returned 1 [0028.128] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e188 | out: lpNewFilePointer=0x0) returned 1 [0028.128] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x18, lpNewFilePointer=0x0, dwMoveMethod=0x38e204 | out: lpNewFilePointer=0x0) returned 1 [0028.128] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1b8 | out: lpNewFilePointer=0x0) returned 1 [0028.128] GetLastError () returned 0x0 [0028.128] SetLastError (dwErrCode=0x0) [0028.128] GetLastError () returned 0x0 [0028.129] SetLastError (dwErrCode=0x0) [0028.129] WriteFile (in: hFile=0x64, lpBuffer=0x556c50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x38e124, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesWritten=0x38e124*=0x8, lpOverlapped=0x0) returned 1 [0028.129] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e180 | out: lpNewFilePointer=0x0) returned 1 [0028.129] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e114 | out: lpNewFilePointer=0x0) returned 1 [0028.129] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x20, lpNewFilePointer=0x0, dwMoveMethod=0x38e190 | out: lpNewFilePointer=0x0) returned 1 [0028.129] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e144 | out: lpNewFilePointer=0x0) returned 1 [0028.129] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.129] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1f4 | out: lpNewFilePointer=0x0) returned 1 [0028.129] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e188 | out: lpNewFilePointer=0x0) returned 1 [0028.129] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x20, lpNewFilePointer=0x0, dwMoveMethod=0x38e204 | out: lpNewFilePointer=0x0) returned 1 [0028.130] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1b8 | out: lpNewFilePointer=0x0) returned 1 [0028.130] GetLastError () returned 0x0 [0028.130] SetLastError (dwErrCode=0x0) [0028.130] GetLastError () returned 0x0 [0028.130] SetLastError (dwErrCode=0x0) [0028.130] WriteFile (in: hFile=0x64, lpBuffer=0x556c50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x38e124, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesWritten=0x38e124*=0x8, lpOverlapped=0x0) returned 1 [0028.130] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e180 | out: lpNewFilePointer=0x0) returned 1 [0028.130] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e114 | out: lpNewFilePointer=0x0) returned 1 [0028.130] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x28, lpNewFilePointer=0x0, dwMoveMethod=0x38e190 | out: lpNewFilePointer=0x0) returned 1 [0028.130] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e144 | out: lpNewFilePointer=0x0) returned 1 [0028.131] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.131] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1f4 | out: lpNewFilePointer=0x0) returned 1 [0028.131] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e188 | out: lpNewFilePointer=0x0) returned 1 [0028.131] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x28, lpNewFilePointer=0x0, dwMoveMethod=0x38e204 | out: lpNewFilePointer=0x0) returned 1 [0028.131] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1b8 | out: lpNewFilePointer=0x0) returned 1 [0028.131] GetLastError () returned 0x0 [0028.131] SetLastError (dwErrCode=0x0) [0028.131] GetLastError () returned 0x0 [0028.131] SetLastError (dwErrCode=0x0) [0028.132] WriteFile (in: hFile=0x64, lpBuffer=0x556c50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x38e124, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesWritten=0x38e124*=0x8, lpOverlapped=0x0) returned 1 [0028.132] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e180 | out: lpNewFilePointer=0x0) returned 1 [0028.132] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e114 | out: lpNewFilePointer=0x0) returned 1 [0028.132] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x30, lpNewFilePointer=0x0, dwMoveMethod=0x38e190 | out: lpNewFilePointer=0x0) returned 1 [0028.132] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e144 | out: lpNewFilePointer=0x0) returned 1 [0028.132] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.132] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1f4 | out: lpNewFilePointer=0x0) returned 1 [0028.133] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e188 | out: lpNewFilePointer=0x0) returned 1 [0028.133] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x30, lpNewFilePointer=0x0, dwMoveMethod=0x38e204 | out: lpNewFilePointer=0x0) returned 1 [0028.133] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1b8 | out: lpNewFilePointer=0x0) returned 1 [0028.133] GetLastError () returned 0x0 [0028.133] SetLastError (dwErrCode=0x0) [0028.133] GetLastError () returned 0x0 [0028.133] SetLastError (dwErrCode=0x0) [0028.133] WriteFile (in: hFile=0x64, lpBuffer=0x556c50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x38e124, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesWritten=0x38e124*=0x8, lpOverlapped=0x0) returned 1 [0028.133] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e180 | out: lpNewFilePointer=0x0) returned 1 [0028.133] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e114 | out: lpNewFilePointer=0x0) returned 1 [0028.133] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x38, lpNewFilePointer=0x0, dwMoveMethod=0x38e190 | out: lpNewFilePointer=0x0) returned 1 [0028.134] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e144 | out: lpNewFilePointer=0x0) returned 1 [0028.134] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.134] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1f4 | out: lpNewFilePointer=0x0) returned 1 [0028.134] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e188 | out: lpNewFilePointer=0x0) returned 1 [0028.134] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x38, lpNewFilePointer=0x0, dwMoveMethod=0x38e204 | out: lpNewFilePointer=0x0) returned 1 [0028.134] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1b8 | out: lpNewFilePointer=0x0) returned 1 [0028.134] GetLastError () returned 0x0 [0028.134] SetLastError (dwErrCode=0x0) [0028.134] GetLastError () returned 0x0 [0028.134] SetLastError (dwErrCode=0x0) [0028.135] WriteFile (in: hFile=0x64, lpBuffer=0x556c50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x38e124, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesWritten=0x38e124*=0x8, lpOverlapped=0x0) returned 1 [0028.135] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e180 | out: lpNewFilePointer=0x0) returned 1 [0028.135] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e114 | out: lpNewFilePointer=0x0) returned 1 [0028.135] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x40, lpNewFilePointer=0x0, dwMoveMethod=0x38e190 | out: lpNewFilePointer=0x0) returned 1 [0028.135] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e144 | out: lpNewFilePointer=0x0) returned 1 [0028.135] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.135] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1f4 | out: lpNewFilePointer=0x0) returned 1 [0028.135] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e188 | out: lpNewFilePointer=0x0) returned 1 [0028.135] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x40, lpNewFilePointer=0x0, dwMoveMethod=0x38e204 | out: lpNewFilePointer=0x0) returned 1 [0028.136] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1b8 | out: lpNewFilePointer=0x0) returned 1 [0028.136] GetLastError () returned 0x0 [0028.136] SetLastError (dwErrCode=0x0) [0028.136] GetLastError () returned 0x0 [0028.136] SetLastError (dwErrCode=0x0) [0028.136] WriteFile (in: hFile=0x64, lpBuffer=0x556c50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x38e124, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesWritten=0x38e124*=0x8, lpOverlapped=0x0) returned 1 [0028.136] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e180 | out: lpNewFilePointer=0x0) returned 1 [0028.136] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e114 | out: lpNewFilePointer=0x0) returned 1 [0028.136] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x48, lpNewFilePointer=0x0, dwMoveMethod=0x38e190 | out: lpNewFilePointer=0x0) returned 1 [0028.136] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e144 | out: lpNewFilePointer=0x0) returned 1 [0028.136] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.137] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1f4 | out: lpNewFilePointer=0x0) returned 1 [0028.137] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e188 | out: lpNewFilePointer=0x0) returned 1 [0028.137] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x48, lpNewFilePointer=0x0, dwMoveMethod=0x38e204 | out: lpNewFilePointer=0x0) returned 1 [0028.137] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1b8 | out: lpNewFilePointer=0x0) returned 1 [0028.137] GetLastError () returned 0x0 [0028.137] SetLastError (dwErrCode=0x0) [0028.137] GetLastError () returned 0x0 [0028.137] SetLastError (dwErrCode=0x0) [0028.137] WriteFile (in: hFile=0x64, lpBuffer=0x556c50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x38e124, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesWritten=0x38e124*=0x8, lpOverlapped=0x0) returned 1 [0028.137] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e180 | out: lpNewFilePointer=0x0) returned 1 [0028.137] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e114 | out: lpNewFilePointer=0x0) returned 1 [0028.138] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x50, lpNewFilePointer=0x0, dwMoveMethod=0x38e190 | out: lpNewFilePointer=0x0) returned 1 [0028.138] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e144 | out: lpNewFilePointer=0x0) returned 1 [0028.138] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.138] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1f4 | out: lpNewFilePointer=0x0) returned 1 [0028.138] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e188 | out: lpNewFilePointer=0x0) returned 1 [0028.138] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x50, lpNewFilePointer=0x0, dwMoveMethod=0x38e204 | out: lpNewFilePointer=0x0) returned 1 [0028.138] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1b8 | out: lpNewFilePointer=0x0) returned 1 [0028.138] GetLastError () returned 0x0 [0028.138] SetLastError (dwErrCode=0x0) [0028.138] GetLastError () returned 0x0 [0028.139] SetLastError (dwErrCode=0x0) [0028.139] WriteFile (in: hFile=0x64, lpBuffer=0x556c50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x38e124, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesWritten=0x38e124*=0x8, lpOverlapped=0x0) returned 1 [0028.139] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e180 | out: lpNewFilePointer=0x0) returned 1 [0028.139] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e114 | out: lpNewFilePointer=0x0) returned 1 [0028.139] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x58, lpNewFilePointer=0x0, dwMoveMethod=0x38e190 | out: lpNewFilePointer=0x0) returned 1 [0028.139] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e144 | out: lpNewFilePointer=0x0) returned 1 [0028.139] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.139] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1f4 | out: lpNewFilePointer=0x0) returned 1 [0028.140] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e188 | out: lpNewFilePointer=0x0) returned 1 [0028.140] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x58, lpNewFilePointer=0x0, dwMoveMethod=0x38e204 | out: lpNewFilePointer=0x0) returned 1 [0028.140] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1b8 | out: lpNewFilePointer=0x0) returned 1 [0028.140] GetLastError () returned 0x0 [0028.140] SetLastError (dwErrCode=0x0) [0028.140] GetLastError () returned 0x0 [0028.140] SetLastError (dwErrCode=0x0) [0028.140] WriteFile (in: hFile=0x64, lpBuffer=0x556c50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x38e124, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesWritten=0x38e124*=0x8, lpOverlapped=0x0) returned 1 [0028.141] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e180 | out: lpNewFilePointer=0x0) returned 1 [0028.141] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e114 | out: lpNewFilePointer=0x0) returned 1 [0028.141] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x60, lpNewFilePointer=0x0, dwMoveMethod=0x38e190 | out: lpNewFilePointer=0x0) returned 1 [0028.141] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e144 | out: lpNewFilePointer=0x0) returned 1 [0028.141] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.142] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1f4 | out: lpNewFilePointer=0x0) returned 1 [0028.142] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e188 | out: lpNewFilePointer=0x0) returned 1 [0028.142] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x60, lpNewFilePointer=0x0, dwMoveMethod=0x38e204 | out: lpNewFilePointer=0x0) returned 1 [0028.142] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1b8 | out: lpNewFilePointer=0x0) returned 1 [0028.142] GetLastError () returned 0x0 [0028.142] SetLastError (dwErrCode=0x0) [0028.142] GetLastError () returned 0x0 [0028.142] SetLastError (dwErrCode=0x0) [0028.142] WriteFile (in: hFile=0x64, lpBuffer=0x556c50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x38e124, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesWritten=0x38e124*=0x8, lpOverlapped=0x0) returned 1 [0028.143] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e180 | out: lpNewFilePointer=0x0) returned 1 [0028.143] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e114 | out: lpNewFilePointer=0x0) returned 1 [0028.143] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x68, lpNewFilePointer=0x0, dwMoveMethod=0x38e190 | out: lpNewFilePointer=0x0) returned 1 [0028.143] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e144 | out: lpNewFilePointer=0x0) returned 1 [0028.143] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.143] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1f4 | out: lpNewFilePointer=0x0) returned 1 [0028.143] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e188 | out: lpNewFilePointer=0x0) returned 1 [0028.144] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x68, lpNewFilePointer=0x0, dwMoveMethod=0x38e204 | out: lpNewFilePointer=0x0) returned 1 [0028.144] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1b8 | out: lpNewFilePointer=0x0) returned 1 [0028.144] GetLastError () returned 0x0 [0028.144] SetLastError (dwErrCode=0x0) [0028.144] GetLastError () returned 0x0 [0028.144] SetLastError (dwErrCode=0x0) [0028.144] WriteFile (in: hFile=0x64, lpBuffer=0x556c50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x38e124, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesWritten=0x38e124*=0x8, lpOverlapped=0x0) returned 1 [0028.144] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e180 | out: lpNewFilePointer=0x0) returned 1 [0028.144] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e114 | out: lpNewFilePointer=0x0) returned 1 [0028.145] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x70, lpNewFilePointer=0x0, dwMoveMethod=0x38e190 | out: lpNewFilePointer=0x0) returned 1 [0028.145] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e144 | out: lpNewFilePointer=0x0) returned 1 [0028.145] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.145] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1f4 | out: lpNewFilePointer=0x0) returned 1 [0028.145] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e188 | out: lpNewFilePointer=0x0) returned 1 [0028.145] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x70, lpNewFilePointer=0x0, dwMoveMethod=0x38e204 | out: lpNewFilePointer=0x0) returned 1 [0028.145] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1b8 | out: lpNewFilePointer=0x0) returned 1 [0028.146] GetLastError () returned 0x0 [0028.146] SetLastError (dwErrCode=0x0) [0028.146] GetLastError () returned 0x0 [0028.146] SetLastError (dwErrCode=0x0) [0028.146] WriteFile (in: hFile=0x64, lpBuffer=0x556c50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x38e124, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesWritten=0x38e124*=0x8, lpOverlapped=0x0) returned 1 [0028.146] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e180 | out: lpNewFilePointer=0x0) returned 1 [0028.146] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e114 | out: lpNewFilePointer=0x0) returned 1 [0028.146] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x78, lpNewFilePointer=0x0, dwMoveMethod=0x38e190 | out: lpNewFilePointer=0x0) returned 1 [0028.146] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e144 | out: lpNewFilePointer=0x0) returned 1 [0028.147] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.147] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1f4 | out: lpNewFilePointer=0x0) returned 1 [0028.147] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e188 | out: lpNewFilePointer=0x0) returned 1 [0028.147] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x78, lpNewFilePointer=0x0, dwMoveMethod=0x38e204 | out: lpNewFilePointer=0x0) returned 1 [0028.147] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1b8 | out: lpNewFilePointer=0x0) returned 1 [0028.147] GetLastError () returned 0x0 [0028.147] SetLastError (dwErrCode=0x0) [0028.148] GetLastError () returned 0x0 [0028.148] SetLastError (dwErrCode=0x0) [0028.148] WriteFile (in: hFile=0x64, lpBuffer=0x556c50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x38e124, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesWritten=0x38e124*=0x8, lpOverlapped=0x0) returned 1 [0028.148] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e180 | out: lpNewFilePointer=0x0) returned 1 [0028.148] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e114 | out: lpNewFilePointer=0x0) returned 1 [0028.148] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x80, lpNewFilePointer=0x0, dwMoveMethod=0x38e190 | out: lpNewFilePointer=0x0) returned 1 [0028.148] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e144 | out: lpNewFilePointer=0x0) returned 1 [0028.148] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.149] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1f4 | out: lpNewFilePointer=0x0) returned 1 [0028.149] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e188 | out: lpNewFilePointer=0x0) returned 1 [0028.149] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x80, lpNewFilePointer=0x0, dwMoveMethod=0x38e204 | out: lpNewFilePointer=0x0) returned 1 [0028.149] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1b8 | out: lpNewFilePointer=0x0) returned 1 [0028.149] GetLastError () returned 0x0 [0028.149] SetLastError (dwErrCode=0x0) [0028.149] GetLastError () returned 0x0 [0028.149] SetLastError (dwErrCode=0x0) [0028.149] WriteFile (in: hFile=0x64, lpBuffer=0x556c50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x38e124, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesWritten=0x38e124*=0x8, lpOverlapped=0x0) returned 1 [0028.149] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e180 | out: lpNewFilePointer=0x0) returned 1 [0028.150] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e114 | out: lpNewFilePointer=0x0) returned 1 [0028.150] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x88, lpNewFilePointer=0x0, dwMoveMethod=0x38e190 | out: lpNewFilePointer=0x0) returned 1 [0028.150] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e144 | out: lpNewFilePointer=0x0) returned 1 [0028.150] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.150] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1f4 | out: lpNewFilePointer=0x0) returned 1 [0028.150] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e188 | out: lpNewFilePointer=0x0) returned 1 [0028.150] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x88, lpNewFilePointer=0x0, dwMoveMethod=0x38e204 | out: lpNewFilePointer=0x0) returned 1 [0028.151] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1b8 | out: lpNewFilePointer=0x0) returned 1 [0028.151] GetLastError () returned 0x0 [0028.151] SetLastError (dwErrCode=0x0) [0028.151] GetLastError () returned 0x0 [0028.151] SetLastError (dwErrCode=0x0) [0028.151] WriteFile (in: hFile=0x64, lpBuffer=0x556c50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x38e124, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesWritten=0x38e124*=0x8, lpOverlapped=0x0) returned 1 [0028.151] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e180 | out: lpNewFilePointer=0x0) returned 1 [0028.151] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e114 | out: lpNewFilePointer=0x0) returned 1 [0028.151] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x90, lpNewFilePointer=0x0, dwMoveMethod=0x38e190 | out: lpNewFilePointer=0x0) returned 1 [0028.152] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e144 | out: lpNewFilePointer=0x0) returned 1 [0028.152] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.152] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1f4 | out: lpNewFilePointer=0x0) returned 1 [0028.152] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e188 | out: lpNewFilePointer=0x0) returned 1 [0028.152] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x90, lpNewFilePointer=0x0, dwMoveMethod=0x38e204 | out: lpNewFilePointer=0x0) returned 1 [0028.152] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1b8 | out: lpNewFilePointer=0x0) returned 1 [0028.152] GetLastError () returned 0x0 [0028.153] SetLastError (dwErrCode=0x0) [0028.153] GetLastError () returned 0x0 [0028.153] SetLastError (dwErrCode=0x0) [0028.153] WriteFile (in: hFile=0x64, lpBuffer=0x556c50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x38e124, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesWritten=0x38e124*=0x8, lpOverlapped=0x0) returned 1 [0028.153] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e180 | out: lpNewFilePointer=0x0) returned 1 [0028.153] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e114 | out: lpNewFilePointer=0x0) returned 1 [0028.153] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x98, lpNewFilePointer=0x0, dwMoveMethod=0x38e190 | out: lpNewFilePointer=0x0) returned 1 [0028.153] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e144 | out: lpNewFilePointer=0x0) returned 1 [0028.154] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.154] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1f4 | out: lpNewFilePointer=0x0) returned 1 [0028.154] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e188 | out: lpNewFilePointer=0x0) returned 1 [0028.154] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x98, lpNewFilePointer=0x0, dwMoveMethod=0x38e204 | out: lpNewFilePointer=0x0) returned 1 [0028.154] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1b8 | out: lpNewFilePointer=0x0) returned 1 [0028.154] GetLastError () returned 0x0 [0028.154] SetLastError (dwErrCode=0x0) [0028.154] GetLastError () returned 0x0 [0028.154] SetLastError (dwErrCode=0x0) [0028.154] WriteFile (in: hFile=0x64, lpBuffer=0x556c50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x38e124, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesWritten=0x38e124*=0x8, lpOverlapped=0x0) returned 1 [0028.155] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e180 | out: lpNewFilePointer=0x0) returned 1 [0028.155] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e114 | out: lpNewFilePointer=0x0) returned 1 [0028.155] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0xa0, lpNewFilePointer=0x0, dwMoveMethod=0x38e190 | out: lpNewFilePointer=0x0) returned 1 [0028.155] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e144 | out: lpNewFilePointer=0x0) returned 1 [0028.155] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.155] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1f4 | out: lpNewFilePointer=0x0) returned 1 [0028.155] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e188 | out: lpNewFilePointer=0x0) returned 1 [0028.155] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0xa0, lpNewFilePointer=0x0, dwMoveMethod=0x38e204 | out: lpNewFilePointer=0x0) returned 1 [0028.155] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1b8 | out: lpNewFilePointer=0x0) returned 1 [0028.155] GetLastError () returned 0x0 [0028.156] SetLastError (dwErrCode=0x0) [0028.156] GetLastError () returned 0x0 [0028.156] SetLastError (dwErrCode=0x0) [0028.156] WriteFile (in: hFile=0x64, lpBuffer=0x556c50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x38e124, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesWritten=0x38e124*=0x8, lpOverlapped=0x0) returned 1 [0028.156] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e180 | out: lpNewFilePointer=0x0) returned 1 [0028.156] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e114 | out: lpNewFilePointer=0x0) returned 1 [0028.156] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0xa8, lpNewFilePointer=0x0, dwMoveMethod=0x38e190 | out: lpNewFilePointer=0x0) returned 1 [0028.156] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e144 | out: lpNewFilePointer=0x0) returned 1 [0028.157] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.157] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1f4 | out: lpNewFilePointer=0x0) returned 1 [0028.157] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e188 | out: lpNewFilePointer=0x0) returned 1 [0028.158] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0xa8, lpNewFilePointer=0x0, dwMoveMethod=0x38e204 | out: lpNewFilePointer=0x0) returned 1 [0028.158] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1b8 | out: lpNewFilePointer=0x0) returned 1 [0028.158] GetLastError () returned 0x0 [0028.158] SetLastError (dwErrCode=0x0) [0028.158] GetLastError () returned 0x0 [0028.158] SetLastError (dwErrCode=0x0) [0028.158] WriteFile (in: hFile=0x64, lpBuffer=0x556c50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x38e124, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesWritten=0x38e124*=0x8, lpOverlapped=0x0) returned 1 [0028.158] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e180 | out: lpNewFilePointer=0x0) returned 1 [0028.158] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e114 | out: lpNewFilePointer=0x0) returned 1 [0028.158] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0xb0, lpNewFilePointer=0x0, dwMoveMethod=0x38e190 | out: lpNewFilePointer=0x0) returned 1 [0028.158] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e144 | out: lpNewFilePointer=0x0) returned 1 [0028.158] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.159] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1f4 | out: lpNewFilePointer=0x0) returned 1 [0028.159] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e188 | out: lpNewFilePointer=0x0) returned 1 [0028.159] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0xb0, lpNewFilePointer=0x0, dwMoveMethod=0x38e204 | out: lpNewFilePointer=0x0) returned 1 [0028.159] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1b8 | out: lpNewFilePointer=0x0) returned 1 [0028.159] GetLastError () returned 0x0 [0028.159] SetLastError (dwErrCode=0x0) [0028.159] GetLastError () returned 0x0 [0028.159] SetLastError (dwErrCode=0x0) [0028.159] WriteFile (in: hFile=0x64, lpBuffer=0x556c50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x38e124, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesWritten=0x38e124*=0x8, lpOverlapped=0x0) returned 1 [0028.159] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e180 | out: lpNewFilePointer=0x0) returned 1 [0028.159] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e114 | out: lpNewFilePointer=0x0) returned 1 [0028.159] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0xb8, lpNewFilePointer=0x0, dwMoveMethod=0x38e190 | out: lpNewFilePointer=0x0) returned 1 [0028.159] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e144 | out: lpNewFilePointer=0x0) returned 1 [0028.160] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.160] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1f4 | out: lpNewFilePointer=0x0) returned 1 [0028.160] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e188 | out: lpNewFilePointer=0x0) returned 1 [0028.160] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0xb8, lpNewFilePointer=0x0, dwMoveMethod=0x38e204 | out: lpNewFilePointer=0x0) returned 1 [0028.160] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1b8 | out: lpNewFilePointer=0x0) returned 1 [0028.160] GetLastError () returned 0x0 [0028.160] SetLastError (dwErrCode=0x0) [0028.160] GetLastError () returned 0x0 [0028.160] SetLastError (dwErrCode=0x0) [0028.160] WriteFile (in: hFile=0x64, lpBuffer=0x556c50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x38e124, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesWritten=0x38e124*=0x8, lpOverlapped=0x0) returned 1 [0028.160] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e180 | out: lpNewFilePointer=0x0) returned 1 [0028.160] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e114 | out: lpNewFilePointer=0x0) returned 1 [0028.160] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0xc0, lpNewFilePointer=0x0, dwMoveMethod=0x38e190 | out: lpNewFilePointer=0x0) returned 1 [0028.161] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e144 | out: lpNewFilePointer=0x0) returned 1 [0028.161] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.161] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1f4 | out: lpNewFilePointer=0x0) returned 1 [0028.161] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e188 | out: lpNewFilePointer=0x0) returned 1 [0028.161] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0xc0, lpNewFilePointer=0x0, dwMoveMethod=0x38e204 | out: lpNewFilePointer=0x0) returned 1 [0028.161] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1b8 | out: lpNewFilePointer=0x0) returned 1 [0028.161] GetLastError () returned 0x0 [0028.161] SetLastError (dwErrCode=0x0) [0028.161] GetLastError () returned 0x0 [0028.161] SetLastError (dwErrCode=0x0) [0028.161] WriteFile (in: hFile=0x64, lpBuffer=0x556c50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x38e124, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesWritten=0x38e124*=0x8, lpOverlapped=0x0) returned 1 [0028.161] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e180 | out: lpNewFilePointer=0x0) returned 1 [0028.162] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e114 | out: lpNewFilePointer=0x0) returned 1 [0028.162] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0xc8, lpNewFilePointer=0x0, dwMoveMethod=0x38e190 | out: lpNewFilePointer=0x0) returned 1 [0028.162] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e144 | out: lpNewFilePointer=0x0) returned 1 [0028.162] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.162] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1f4 | out: lpNewFilePointer=0x0) returned 1 [0028.162] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e188 | out: lpNewFilePointer=0x0) returned 1 [0028.162] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0xc8, lpNewFilePointer=0x0, dwMoveMethod=0x38e204 | out: lpNewFilePointer=0x0) returned 1 [0028.162] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1b8 | out: lpNewFilePointer=0x0) returned 1 [0028.162] GetLastError () returned 0x0 [0028.162] SetLastError (dwErrCode=0x0) [0028.162] GetLastError () returned 0x0 [0028.162] SetLastError (dwErrCode=0x0) [0028.162] WriteFile (in: hFile=0x64, lpBuffer=0x556c50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x38e124, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesWritten=0x38e124*=0x8, lpOverlapped=0x0) returned 1 [0028.163] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e180 | out: lpNewFilePointer=0x0) returned 1 [0028.163] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e114 | out: lpNewFilePointer=0x0) returned 1 [0028.163] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0xd0, lpNewFilePointer=0x0, dwMoveMethod=0x38e190 | out: lpNewFilePointer=0x0) returned 1 [0028.163] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e144 | out: lpNewFilePointer=0x0) returned 1 [0028.163] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.163] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1f4 | out: lpNewFilePointer=0x0) returned 1 [0028.163] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e188 | out: lpNewFilePointer=0x0) returned 1 [0028.163] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0xd0, lpNewFilePointer=0x0, dwMoveMethod=0x38e204 | out: lpNewFilePointer=0x0) returned 1 [0028.163] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1b8 | out: lpNewFilePointer=0x0) returned 1 [0028.163] GetLastError () returned 0x0 [0028.164] SetLastError (dwErrCode=0x0) [0028.164] GetLastError () returned 0x0 [0028.164] SetLastError (dwErrCode=0x0) [0028.164] WriteFile (in: hFile=0x64, lpBuffer=0x556c50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x38e124, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesWritten=0x38e124*=0x8, lpOverlapped=0x0) returned 1 [0028.164] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e180 | out: lpNewFilePointer=0x0) returned 1 [0028.164] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e114 | out: lpNewFilePointer=0x0) returned 1 [0028.164] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0xd8, lpNewFilePointer=0x0, dwMoveMethod=0x38e190 | out: lpNewFilePointer=0x0) returned 1 [0028.164] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e144 | out: lpNewFilePointer=0x0) returned 1 [0028.164] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.164] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1f4 | out: lpNewFilePointer=0x0) returned 1 [0028.164] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e188 | out: lpNewFilePointer=0x0) returned 1 [0028.164] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0xd8, lpNewFilePointer=0x0, dwMoveMethod=0x38e204 | out: lpNewFilePointer=0x0) returned 1 [0028.164] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1b8 | out: lpNewFilePointer=0x0) returned 1 [0028.165] GetLastError () returned 0x0 [0028.165] SetLastError (dwErrCode=0x0) [0028.165] GetLastError () returned 0x0 [0028.165] SetLastError (dwErrCode=0x0) [0028.165] WriteFile (in: hFile=0x64, lpBuffer=0x556c50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x38e124, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesWritten=0x38e124*=0x8, lpOverlapped=0x0) returned 1 [0028.165] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e180 | out: lpNewFilePointer=0x0) returned 1 [0028.165] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e114 | out: lpNewFilePointer=0x0) returned 1 [0028.165] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0xe0, lpNewFilePointer=0x0, dwMoveMethod=0x38e190 | out: lpNewFilePointer=0x0) returned 1 [0028.165] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e144 | out: lpNewFilePointer=0x0) returned 1 [0028.165] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.165] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1f4 | out: lpNewFilePointer=0x0) returned 1 [0028.165] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e188 | out: lpNewFilePointer=0x0) returned 1 [0028.165] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0xe0, lpNewFilePointer=0x0, dwMoveMethod=0x38e204 | out: lpNewFilePointer=0x0) returned 1 [0028.166] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1b8 | out: lpNewFilePointer=0x0) returned 1 [0028.166] GetLastError () returned 0x0 [0028.166] SetLastError (dwErrCode=0x0) [0028.166] GetLastError () returned 0x0 [0028.166] SetLastError (dwErrCode=0x0) [0028.166] WriteFile (in: hFile=0x64, lpBuffer=0x556c50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x38e124, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesWritten=0x38e124*=0x8, lpOverlapped=0x0) returned 1 [0028.166] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e180 | out: lpNewFilePointer=0x0) returned 1 [0028.166] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e114 | out: lpNewFilePointer=0x0) returned 1 [0028.166] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0xe8, lpNewFilePointer=0x0, dwMoveMethod=0x38e190 | out: lpNewFilePointer=0x0) returned 1 [0028.166] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e144 | out: lpNewFilePointer=0x0) returned 1 [0028.166] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.166] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1f4 | out: lpNewFilePointer=0x0) returned 1 [0028.166] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e188 | out: lpNewFilePointer=0x0) returned 1 [0028.167] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0xe8, lpNewFilePointer=0x0, dwMoveMethod=0x38e204 | out: lpNewFilePointer=0x0) returned 1 [0028.167] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1b8 | out: lpNewFilePointer=0x0) returned 1 [0028.167] GetLastError () returned 0x0 [0028.167] SetLastError (dwErrCode=0x0) [0028.167] GetLastError () returned 0x0 [0028.167] SetLastError (dwErrCode=0x0) [0028.167] WriteFile (in: hFile=0x64, lpBuffer=0x556c50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x38e124, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesWritten=0x38e124*=0x8, lpOverlapped=0x0) returned 1 [0028.167] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e180 | out: lpNewFilePointer=0x0) returned 1 [0028.167] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e114 | out: lpNewFilePointer=0x0) returned 1 [0028.167] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0xf0, lpNewFilePointer=0x0, dwMoveMethod=0x38e190 | out: lpNewFilePointer=0x0) returned 1 [0028.167] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e144 | out: lpNewFilePointer=0x0) returned 1 [0028.167] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.168] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1f4 | out: lpNewFilePointer=0x0) returned 1 [0028.168] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e188 | out: lpNewFilePointer=0x0) returned 1 [0028.168] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0xf0, lpNewFilePointer=0x0, dwMoveMethod=0x38e204 | out: lpNewFilePointer=0x0) returned 1 [0028.168] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1b8 | out: lpNewFilePointer=0x0) returned 1 [0028.168] GetLastError () returned 0x0 [0028.168] SetLastError (dwErrCode=0x0) [0028.168] GetLastError () returned 0x0 [0028.168] SetLastError (dwErrCode=0x0) [0028.168] WriteFile (in: hFile=0x64, lpBuffer=0x556c50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x38e124, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesWritten=0x38e124*=0x8, lpOverlapped=0x0) returned 1 [0028.168] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e180 | out: lpNewFilePointer=0x0) returned 1 [0028.168] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e114 | out: lpNewFilePointer=0x0) returned 1 [0028.168] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0xf8, lpNewFilePointer=0x0, dwMoveMethod=0x38e190 | out: lpNewFilePointer=0x0) returned 1 [0028.168] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e144 | out: lpNewFilePointer=0x0) returned 1 [0028.169] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.169] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1f4 | out: lpNewFilePointer=0x0) returned 1 [0028.169] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e188 | out: lpNewFilePointer=0x0) returned 1 [0028.169] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0xf8, lpNewFilePointer=0x0, dwMoveMethod=0x38e204 | out: lpNewFilePointer=0x0) returned 1 [0028.169] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1b8 | out: lpNewFilePointer=0x0) returned 1 [0028.169] GetLastError () returned 0x0 [0028.169] SetLastError (dwErrCode=0x0) [0028.169] GetLastError () returned 0x0 [0028.169] SetLastError (dwErrCode=0x0) [0028.169] WriteFile (in: hFile=0x64, lpBuffer=0x556c50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x38e124, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesWritten=0x38e124*=0x8, lpOverlapped=0x0) returned 1 [0028.169] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e180 | out: lpNewFilePointer=0x0) returned 1 [0028.169] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e114 | out: lpNewFilePointer=0x0) returned 1 [0028.170] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x100, lpNewFilePointer=0x0, dwMoveMethod=0x38e190 | out: lpNewFilePointer=0x0) returned 1 [0028.170] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e144 | out: lpNewFilePointer=0x0) returned 1 [0028.170] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.170] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1f4 | out: lpNewFilePointer=0x0) returned 1 [0028.170] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e188 | out: lpNewFilePointer=0x0) returned 1 [0028.170] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x100, lpNewFilePointer=0x0, dwMoveMethod=0x38e204 | out: lpNewFilePointer=0x0) returned 1 [0028.170] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1b8 | out: lpNewFilePointer=0x0) returned 1 [0028.170] GetLastError () returned 0x0 [0028.170] SetLastError (dwErrCode=0x0) [0028.170] GetLastError () returned 0x0 [0028.170] SetLastError (dwErrCode=0x0) [0028.170] WriteFile (in: hFile=0x64, lpBuffer=0x556c50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x38e124, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesWritten=0x38e124*=0x8, lpOverlapped=0x0) returned 1 [0028.170] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e180 | out: lpNewFilePointer=0x0) returned 1 [0028.171] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e114 | out: lpNewFilePointer=0x0) returned 1 [0028.171] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x108, lpNewFilePointer=0x0, dwMoveMethod=0x38e190 | out: lpNewFilePointer=0x0) returned 1 [0028.171] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e144 | out: lpNewFilePointer=0x0) returned 1 [0028.171] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.171] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1f4 | out: lpNewFilePointer=0x0) returned 1 [0028.171] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e188 | out: lpNewFilePointer=0x0) returned 1 [0028.171] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x108, lpNewFilePointer=0x0, dwMoveMethod=0x38e204 | out: lpNewFilePointer=0x0) returned 1 [0028.171] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1b8 | out: lpNewFilePointer=0x0) returned 1 [0028.171] GetLastError () returned 0x0 [0028.171] SetLastError (dwErrCode=0x0) [0028.171] GetLastError () returned 0x0 [0028.171] SetLastError (dwErrCode=0x0) [0028.171] WriteFile (in: hFile=0x64, lpBuffer=0x556c50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x38e124, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesWritten=0x38e124*=0x8, lpOverlapped=0x0) returned 1 [0028.172] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e180 | out: lpNewFilePointer=0x0) returned 1 [0028.172] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e114 | out: lpNewFilePointer=0x0) returned 1 [0028.172] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x110, lpNewFilePointer=0x0, dwMoveMethod=0x38e190 | out: lpNewFilePointer=0x0) returned 1 [0028.172] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e144 | out: lpNewFilePointer=0x0) returned 1 [0028.173] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.173] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1f4 | out: lpNewFilePointer=0x0) returned 1 [0028.173] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e188 | out: lpNewFilePointer=0x0) returned 1 [0028.173] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x110, lpNewFilePointer=0x0, dwMoveMethod=0x38e204 | out: lpNewFilePointer=0x0) returned 1 [0028.173] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1b8 | out: lpNewFilePointer=0x0) returned 1 [0028.173] GetLastError () returned 0x0 [0028.173] SetLastError (dwErrCode=0x0) [0028.173] GetLastError () returned 0x0 [0028.173] SetLastError (dwErrCode=0x0) [0028.173] WriteFile (in: hFile=0x64, lpBuffer=0x556c50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x38e124, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesWritten=0x38e124*=0x8, lpOverlapped=0x0) returned 1 [0028.173] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e180 | out: lpNewFilePointer=0x0) returned 1 [0028.173] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e114 | out: lpNewFilePointer=0x0) returned 1 [0028.173] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x118, lpNewFilePointer=0x0, dwMoveMethod=0x38e190 | out: lpNewFilePointer=0x0) returned 1 [0028.174] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e144 | out: lpNewFilePointer=0x0) returned 1 [0028.174] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.174] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1f4 | out: lpNewFilePointer=0x0) returned 1 [0028.174] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e188 | out: lpNewFilePointer=0x0) returned 1 [0028.174] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x118, lpNewFilePointer=0x0, dwMoveMethod=0x38e204 | out: lpNewFilePointer=0x0) returned 1 [0028.174] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1b8 | out: lpNewFilePointer=0x0) returned 1 [0028.174] GetLastError () returned 0x0 [0028.174] SetLastError (dwErrCode=0x0) [0028.174] GetLastError () returned 0x0 [0028.174] SetLastError (dwErrCode=0x0) [0028.174] WriteFile (in: hFile=0x64, lpBuffer=0x556c50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x38e124, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesWritten=0x38e124*=0x8, lpOverlapped=0x0) returned 1 [0028.174] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e180 | out: lpNewFilePointer=0x0) returned 1 [0028.175] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e114 | out: lpNewFilePointer=0x0) returned 1 [0028.175] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x120, lpNewFilePointer=0x0, dwMoveMethod=0x38e190 | out: lpNewFilePointer=0x0) returned 1 [0028.175] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e144 | out: lpNewFilePointer=0x0) returned 1 [0028.175] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.175] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1f4 | out: lpNewFilePointer=0x0) returned 1 [0028.175] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e188 | out: lpNewFilePointer=0x0) returned 1 [0028.175] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x120, lpNewFilePointer=0x0, dwMoveMethod=0x38e204 | out: lpNewFilePointer=0x0) returned 1 [0028.175] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1b8 | out: lpNewFilePointer=0x0) returned 1 [0028.175] GetLastError () returned 0x0 [0028.175] SetLastError (dwErrCode=0x0) [0028.175] GetLastError () returned 0x0 [0028.175] SetLastError (dwErrCode=0x0) [0028.175] WriteFile (in: hFile=0x64, lpBuffer=0x556c50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x38e124, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesWritten=0x38e124*=0x8, lpOverlapped=0x0) returned 1 [0028.176] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e180 | out: lpNewFilePointer=0x0) returned 1 [0028.176] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e114 | out: lpNewFilePointer=0x0) returned 1 [0028.176] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x128, lpNewFilePointer=0x0, dwMoveMethod=0x38e190 | out: lpNewFilePointer=0x0) returned 1 [0028.176] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e144 | out: lpNewFilePointer=0x0) returned 1 [0028.176] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.176] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1f4 | out: lpNewFilePointer=0x0) returned 1 [0028.176] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e188 | out: lpNewFilePointer=0x0) returned 1 [0028.176] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x128, lpNewFilePointer=0x0, dwMoveMethod=0x38e204 | out: lpNewFilePointer=0x0) returned 1 [0028.176] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1b8 | out: lpNewFilePointer=0x0) returned 1 [0028.176] GetLastError () returned 0x0 [0028.177] SetLastError (dwErrCode=0x0) [0028.177] GetLastError () returned 0x0 [0028.177] SetLastError (dwErrCode=0x0) [0028.177] WriteFile (in: hFile=0x64, lpBuffer=0x556c50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x38e124, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesWritten=0x38e124*=0x8, lpOverlapped=0x0) returned 1 [0028.177] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e180 | out: lpNewFilePointer=0x0) returned 1 [0028.177] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e114 | out: lpNewFilePointer=0x0) returned 1 [0028.177] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x130, lpNewFilePointer=0x0, dwMoveMethod=0x38e190 | out: lpNewFilePointer=0x0) returned 1 [0028.177] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e144 | out: lpNewFilePointer=0x0) returned 1 [0028.177] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.177] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1f4 | out: lpNewFilePointer=0x0) returned 1 [0028.177] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e188 | out: lpNewFilePointer=0x0) returned 1 [0028.177] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x130, lpNewFilePointer=0x0, dwMoveMethod=0x38e204 | out: lpNewFilePointer=0x0) returned 1 [0028.177] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1b8 | out: lpNewFilePointer=0x0) returned 1 [0028.178] GetLastError () returned 0x0 [0028.178] SetLastError (dwErrCode=0x0) [0028.178] GetLastError () returned 0x0 [0028.178] SetLastError (dwErrCode=0x0) [0028.178] WriteFile (in: hFile=0x64, lpBuffer=0x556c50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x38e124, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesWritten=0x38e124*=0x8, lpOverlapped=0x0) returned 1 [0028.178] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e180 | out: lpNewFilePointer=0x0) returned 1 [0028.178] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e114 | out: lpNewFilePointer=0x0) returned 1 [0028.178] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x138, lpNewFilePointer=0x0, dwMoveMethod=0x38e190 | out: lpNewFilePointer=0x0) returned 1 [0028.178] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e144 | out: lpNewFilePointer=0x0) returned 1 [0028.178] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.178] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1f4 | out: lpNewFilePointer=0x0) returned 1 [0028.178] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e188 | out: lpNewFilePointer=0x0) returned 1 [0028.179] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x138, lpNewFilePointer=0x0, dwMoveMethod=0x38e204 | out: lpNewFilePointer=0x0) returned 1 [0028.179] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1b8 | out: lpNewFilePointer=0x0) returned 1 [0028.179] GetLastError () returned 0x0 [0028.179] SetLastError (dwErrCode=0x0) [0028.179] GetLastError () returned 0x0 [0028.179] SetLastError (dwErrCode=0x0) [0028.179] WriteFile (in: hFile=0x64, lpBuffer=0x556c50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x38e124, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesWritten=0x38e124*=0x8, lpOverlapped=0x0) returned 1 [0028.179] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e180 | out: lpNewFilePointer=0x0) returned 1 [0028.179] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e114 | out: lpNewFilePointer=0x0) returned 1 [0028.179] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x140, lpNewFilePointer=0x0, dwMoveMethod=0x38e190 | out: lpNewFilePointer=0x0) returned 1 [0028.179] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e144 | out: lpNewFilePointer=0x0) returned 1 [0028.179] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.180] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1f4 | out: lpNewFilePointer=0x0) returned 1 [0028.180] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e188 | out: lpNewFilePointer=0x0) returned 1 [0028.180] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x140, lpNewFilePointer=0x0, dwMoveMethod=0x38e204 | out: lpNewFilePointer=0x0) returned 1 [0028.180] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1b8 | out: lpNewFilePointer=0x0) returned 1 [0028.180] GetLastError () returned 0x0 [0028.180] SetLastError (dwErrCode=0x0) [0028.180] GetLastError () returned 0x0 [0028.180] SetLastError (dwErrCode=0x0) [0028.180] WriteFile (in: hFile=0x64, lpBuffer=0x556c50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x38e124, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesWritten=0x38e124*=0x8, lpOverlapped=0x0) returned 1 [0028.180] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e180 | out: lpNewFilePointer=0x0) returned 1 [0028.180] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e114 | out: lpNewFilePointer=0x0) returned 1 [0028.180] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x148, lpNewFilePointer=0x0, dwMoveMethod=0x38e190 | out: lpNewFilePointer=0x0) returned 1 [0028.181] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e144 | out: lpNewFilePointer=0x0) returned 1 [0028.181] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.181] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1f4 | out: lpNewFilePointer=0x0) returned 1 [0028.181] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e188 | out: lpNewFilePointer=0x0) returned 1 [0028.181] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x148, lpNewFilePointer=0x0, dwMoveMethod=0x38e204 | out: lpNewFilePointer=0x0) returned 1 [0028.181] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1b8 | out: lpNewFilePointer=0x0) returned 1 [0028.181] GetLastError () returned 0x0 [0028.181] SetLastError (dwErrCode=0x0) [0028.181] GetLastError () returned 0x0 [0028.181] SetLastError (dwErrCode=0x0) [0028.181] WriteFile (in: hFile=0x64, lpBuffer=0x556c50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x38e124, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesWritten=0x38e124*=0x8, lpOverlapped=0x0) returned 1 [0028.181] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e180 | out: lpNewFilePointer=0x0) returned 1 [0028.181] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e114 | out: lpNewFilePointer=0x0) returned 1 [0028.181] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x150, lpNewFilePointer=0x0, dwMoveMethod=0x38e190 | out: lpNewFilePointer=0x0) returned 1 [0028.182] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e144 | out: lpNewFilePointer=0x0) returned 1 [0028.182] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.182] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1f4 | out: lpNewFilePointer=0x0) returned 1 [0028.182] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e188 | out: lpNewFilePointer=0x0) returned 1 [0028.182] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x150, lpNewFilePointer=0x0, dwMoveMethod=0x38e204 | out: lpNewFilePointer=0x0) returned 1 [0028.182] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1b8 | out: lpNewFilePointer=0x0) returned 1 [0028.182] GetLastError () returned 0x0 [0028.182] SetLastError (dwErrCode=0x0) [0028.182] GetLastError () returned 0x0 [0028.182] SetLastError (dwErrCode=0x0) [0028.182] WriteFile (in: hFile=0x64, lpBuffer=0x556c50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x38e124, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesWritten=0x38e124*=0x8, lpOverlapped=0x0) returned 1 [0028.182] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e180 | out: lpNewFilePointer=0x0) returned 1 [0028.183] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.183] GetLastError () returned 0x0 [0028.183] SetLastError (dwErrCode=0x0) [0028.183] GetLastError () returned 0x0 [0028.183] SetLastError (dwErrCode=0x0) [0028.183] WriteFile (in: hFile=0x64, lpBuffer=0x556c50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x38e124, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesWritten=0x38e124*=0x8, lpOverlapped=0x0) returned 1 [0028.183] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.183] GetLastError () returned 0x0 [0028.183] SetLastError (dwErrCode=0x0) [0028.183] GetLastError () returned 0x0 [0028.183] SetLastError (dwErrCode=0x0) [0028.183] WriteFile (in: hFile=0x64, lpBuffer=0x556c50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x38e124, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesWritten=0x38e124*=0x8, lpOverlapped=0x0) returned 1 [0028.183] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.184] GetLastError () returned 0x0 [0028.184] SetLastError (dwErrCode=0x0) [0028.184] GetLastError () returned 0x0 [0028.184] SetLastError (dwErrCode=0x0) [0028.184] WriteFile (in: hFile=0x64, lpBuffer=0x556c50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x38e124, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesWritten=0x38e124*=0x8, lpOverlapped=0x0) returned 1 [0028.184] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.184] GetLastError () returned 0x0 [0028.184] SetLastError (dwErrCode=0x0) [0028.184] GetLastError () returned 0x0 [0028.184] SetLastError (dwErrCode=0x0) [0028.184] WriteFile (in: hFile=0x64, lpBuffer=0x556c50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x38e124, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesWritten=0x38e124*=0x8, lpOverlapped=0x0) returned 1 [0028.184] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.184] GetLastError () returned 0x0 [0028.184] SetLastError (dwErrCode=0x0) [0028.184] GetLastError () returned 0x0 [0028.185] SetLastError (dwErrCode=0x0) [0028.185] WriteFile (in: hFile=0x64, lpBuffer=0x556c50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x38e124, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesWritten=0x38e124*=0x8, lpOverlapped=0x0) returned 1 [0028.185] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.185] GetLastError () returned 0x0 [0028.185] SetLastError (dwErrCode=0x0) [0028.185] GetLastError () returned 0x0 [0028.185] SetLastError (dwErrCode=0x0) [0028.185] WriteFile (in: hFile=0x64, lpBuffer=0x556c50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x38e124, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesWritten=0x38e124*=0x8, lpOverlapped=0x0) returned 1 [0028.185] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.185] GetLastError () returned 0x0 [0028.185] SetLastError (dwErrCode=0x0) [0028.185] GetLastError () returned 0x0 [0028.185] SetLastError (dwErrCode=0x0) [0028.185] WriteFile (in: hFile=0x64, lpBuffer=0x556c50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x38e124, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesWritten=0x38e124*=0x8, lpOverlapped=0x0) returned 1 [0028.185] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.186] GetLastError () returned 0x0 [0028.186] SetLastError (dwErrCode=0x0) [0028.186] GetLastError () returned 0x0 [0028.186] SetLastError (dwErrCode=0x0) [0028.186] WriteFile (in: hFile=0x64, lpBuffer=0x556c50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x38e124, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesWritten=0x38e124*=0x8, lpOverlapped=0x0) returned 1 [0028.186] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.186] GetLastError () returned 0x0 [0028.186] SetLastError (dwErrCode=0x0) [0028.186] GetLastError () returned 0x0 [0028.186] SetLastError (dwErrCode=0x0) [0028.186] WriteFile (in: hFile=0x64, lpBuffer=0x556c50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x38e124, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesWritten=0x38e124*=0x8, lpOverlapped=0x0) returned 1 [0028.186] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.186] GetLastError () returned 0x0 [0028.186] SetLastError (dwErrCode=0x0) [0028.186] GetLastError () returned 0x0 [0028.187] SetLastError (dwErrCode=0x0) [0028.187] WriteFile (in: hFile=0x64, lpBuffer=0x556c50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x38e124, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesWritten=0x38e124*=0x8, lpOverlapped=0x0) returned 1 [0028.187] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.187] GetLastError () returned 0x0 [0028.187] SetLastError (dwErrCode=0x0) [0028.187] GetLastError () returned 0x0 [0028.187] SetLastError (dwErrCode=0x0) [0028.187] WriteFile (in: hFile=0x64, lpBuffer=0x556c50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x38e124, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesWritten=0x38e124*=0x8, lpOverlapped=0x0) returned 1 [0028.187] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.187] GetLastError () returned 0x0 [0028.188] SetLastError (dwErrCode=0x0) [0028.188] GetLastError () returned 0x0 [0028.188] SetLastError (dwErrCode=0x0) [0028.188] WriteFile (in: hFile=0x64, lpBuffer=0x556c50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x38e124, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesWritten=0x38e124*=0x8, lpOverlapped=0x0) returned 1 [0028.188] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.188] GetLastError () returned 0x0 [0028.188] SetLastError (dwErrCode=0x0) [0028.188] GetLastError () returned 0x0 [0028.188] SetLastError (dwErrCode=0x0) [0028.188] WriteFile (in: hFile=0x64, lpBuffer=0x556c50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x38e124, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesWritten=0x38e124*=0x8, lpOverlapped=0x0) returned 1 [0028.188] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.188] GetLastError () returned 0x0 [0028.188] SetLastError (dwErrCode=0x0) [0028.188] GetLastError () returned 0x0 [0028.188] SetLastError (dwErrCode=0x0) [0028.189] WriteFile (in: hFile=0x64, lpBuffer=0x556c50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x38e124, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesWritten=0x38e124*=0x8, lpOverlapped=0x0) returned 1 [0028.189] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.189] GetLastError () returned 0x0 [0028.189] SetLastError (dwErrCode=0x0) [0028.189] GetLastError () returned 0x0 [0028.189] SetLastError (dwErrCode=0x0) [0028.189] WriteFile (in: hFile=0x64, lpBuffer=0x556c50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x38e124, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesWritten=0x38e124*=0x8, lpOverlapped=0x0) returned 1 [0028.189] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.189] GetLastError () returned 0x0 [0028.189] SetLastError (dwErrCode=0x0) [0028.189] GetLastError () returned 0x0 [0028.189] SetLastError (dwErrCode=0x0) [0028.189] WriteFile (in: hFile=0x64, lpBuffer=0x556c50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x38e124, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesWritten=0x38e124*=0x8, lpOverlapped=0x0) returned 1 [0028.189] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.190] GetLastError () returned 0x0 [0028.190] SetLastError (dwErrCode=0x0) [0028.190] GetLastError () returned 0x0 [0028.190] SetLastError (dwErrCode=0x0) [0028.190] WriteFile (in: hFile=0x64, lpBuffer=0x556c50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x38e124, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesWritten=0x38e124*=0x8, lpOverlapped=0x0) returned 1 [0028.190] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.190] GetLastError () returned 0x0 [0028.190] SetLastError (dwErrCode=0x0) [0028.190] GetLastError () returned 0x0 [0028.190] SetLastError (dwErrCode=0x0) [0028.190] WriteFile (in: hFile=0x64, lpBuffer=0x556c50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x38e124, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesWritten=0x38e124*=0x8, lpOverlapped=0x0) returned 1 [0028.190] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.190] GetLastError () returned 0x0 [0028.190] SetLastError (dwErrCode=0x0) [0028.190] GetLastError () returned 0x0 [0028.190] SetLastError (dwErrCode=0x0) [0028.191] WriteFile (in: hFile=0x64, lpBuffer=0x556c50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x38e124, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesWritten=0x38e124*=0x8, lpOverlapped=0x0) returned 1 [0028.191] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.191] GetLastError () returned 0x0 [0028.191] SetLastError (dwErrCode=0x0) [0028.191] GetLastError () returned 0x0 [0028.191] SetLastError (dwErrCode=0x0) [0028.191] WriteFile (in: hFile=0x64, lpBuffer=0x556c50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x38e124, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesWritten=0x38e124*=0x8, lpOverlapped=0x0) returned 1 [0028.191] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.191] GetLastError () returned 0x0 [0028.191] SetLastError (dwErrCode=0x0) [0028.191] GetLastError () returned 0x0 [0028.191] SetLastError (dwErrCode=0x0) [0028.191] WriteFile (in: hFile=0x64, lpBuffer=0x556c50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x38e124, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesWritten=0x38e124*=0x8, lpOverlapped=0x0) returned 1 [0028.191] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.192] GetLastError () returned 0x0 [0028.192] SetLastError (dwErrCode=0x0) [0028.192] GetLastError () returned 0x0 [0028.192] SetLastError (dwErrCode=0x0) [0028.192] WriteFile (in: hFile=0x64, lpBuffer=0x556c50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x38e124, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesWritten=0x38e124*=0x8, lpOverlapped=0x0) returned 1 [0028.192] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.192] GetLastError () returned 0x0 [0028.192] SetLastError (dwErrCode=0x0) [0028.192] GetLastError () returned 0x0 [0028.192] SetLastError (dwErrCode=0x0) [0028.192] WriteFile (in: hFile=0x64, lpBuffer=0x556c50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x38e124, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesWritten=0x38e124*=0x8, lpOverlapped=0x0) returned 1 [0028.192] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.192] GetLastError () returned 0x0 [0028.192] SetLastError (dwErrCode=0x0) [0028.192] GetLastError () returned 0x0 [0028.192] SetLastError (dwErrCode=0x0) [0028.192] WriteFile (in: hFile=0x64, lpBuffer=0x556c50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x38e124, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesWritten=0x38e124*=0x8, lpOverlapped=0x0) returned 1 [0028.193] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.193] GetLastError () returned 0x0 [0028.193] SetLastError (dwErrCode=0x0) [0028.193] GetLastError () returned 0x0 [0028.193] SetLastError (dwErrCode=0x0) [0028.193] WriteFile (in: hFile=0x64, lpBuffer=0x556c50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x38e124, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesWritten=0x38e124*=0x8, lpOverlapped=0x0) returned 1 [0028.193] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.193] GetLastError () returned 0x0 [0028.193] SetLastError (dwErrCode=0x0) [0028.193] GetLastError () returned 0x0 [0028.193] SetLastError (dwErrCode=0x0) [0028.193] WriteFile (in: hFile=0x64, lpBuffer=0x556c50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x38e124, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesWritten=0x38e124*=0x8, lpOverlapped=0x0) returned 1 [0028.193] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.193] GetLastError () returned 0x0 [0028.193] SetLastError (dwErrCode=0x0) [0028.193] GetLastError () returned 0x0 [0028.193] SetLastError (dwErrCode=0x0) [0028.194] WriteFile (in: hFile=0x64, lpBuffer=0x556c50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x38e124, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesWritten=0x38e124*=0x8, lpOverlapped=0x0) returned 1 [0028.194] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.194] GetLastError () returned 0x0 [0028.194] SetLastError (dwErrCode=0x0) [0028.194] GetLastError () returned 0x0 [0028.194] SetLastError (dwErrCode=0x0) [0028.194] WriteFile (in: hFile=0x64, lpBuffer=0x556c50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x38e124, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesWritten=0x38e124*=0x8, lpOverlapped=0x0) returned 1 [0028.194] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.194] GetLastError () returned 0x0 [0028.194] SetLastError (dwErrCode=0x0) [0028.194] GetLastError () returned 0x0 [0028.194] SetLastError (dwErrCode=0x0) [0028.194] WriteFile (in: hFile=0x64, lpBuffer=0x556c50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x38e124, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesWritten=0x38e124*=0x8, lpOverlapped=0x0) returned 1 [0028.194] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.195] GetLastError () returned 0x0 [0028.195] SetLastError (dwErrCode=0x0) [0028.195] GetLastError () returned 0x0 [0028.195] SetLastError (dwErrCode=0x0) [0028.195] WriteFile (in: hFile=0x64, lpBuffer=0x556c50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x38e124, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesWritten=0x38e124*=0x8, lpOverlapped=0x0) returned 1 [0028.195] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.195] GetLastError () returned 0x0 [0028.195] SetLastError (dwErrCode=0x0) [0028.195] GetLastError () returned 0x0 [0028.195] SetLastError (dwErrCode=0x0) [0028.195] WriteFile (in: hFile=0x64, lpBuffer=0x556c50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x38e124, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesWritten=0x38e124*=0x8, lpOverlapped=0x0) returned 1 [0028.195] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.195] GetLastError () returned 0x0 [0028.195] SetLastError (dwErrCode=0x0) [0028.195] GetLastError () returned 0x0 [0028.195] SetLastError (dwErrCode=0x0) [0028.195] WriteFile (in: hFile=0x64, lpBuffer=0x556c50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x38e124, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesWritten=0x38e124*=0x8, lpOverlapped=0x0) returned 1 [0028.196] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.196] GetLastError () returned 0x0 [0028.196] SetLastError (dwErrCode=0x0) [0028.196] GetLastError () returned 0x0 [0028.196] SetLastError (dwErrCode=0x0) [0028.196] WriteFile (in: hFile=0x64, lpBuffer=0x556c50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x38e124, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesWritten=0x38e124*=0x8, lpOverlapped=0x0) returned 1 [0028.196] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.196] GetLastError () returned 0x0 [0028.196] SetLastError (dwErrCode=0x0) [0028.196] GetLastError () returned 0x0 [0028.196] SetLastError (dwErrCode=0x0) [0028.196] WriteFile (in: hFile=0x64, lpBuffer=0x556c50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x38e124, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesWritten=0x38e124*=0x8, lpOverlapped=0x0) returned 1 [0028.196] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.196] GetLastError () returned 0x0 [0028.196] SetLastError (dwErrCode=0x0) [0028.197] GetLastError () returned 0x0 [0028.197] SetLastError (dwErrCode=0x0) [0028.197] WriteFile (in: hFile=0x64, lpBuffer=0x556c50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x38e124, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesWritten=0x38e124*=0x8, lpOverlapped=0x0) returned 1 [0028.197] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.197] GetLastError () returned 0x0 [0028.197] SetLastError (dwErrCode=0x0) [0028.197] GetLastError () returned 0x0 [0028.197] SetLastError (dwErrCode=0x0) [0028.197] WriteFile (in: hFile=0x64, lpBuffer=0x556c50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x38e124, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesWritten=0x38e124*=0x8, lpOverlapped=0x0) returned 1 [0028.197] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.197] GetLastError () returned 0x0 [0028.197] SetLastError (dwErrCode=0x0) [0028.197] GetLastError () returned 0x0 [0028.197] SetLastError (dwErrCode=0x0) [0028.197] WriteFile (in: hFile=0x64, lpBuffer=0x556c50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x38e124, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesWritten=0x38e124*=0x8, lpOverlapped=0x0) returned 1 [0028.198] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.198] GetLastError () returned 0x0 [0028.198] SetLastError (dwErrCode=0x0) [0028.198] GetLastError () returned 0x0 [0028.198] SetLastError (dwErrCode=0x0) [0028.198] WriteFile (in: hFile=0x64, lpBuffer=0x556c50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x38e124, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesWritten=0x38e124*=0x8, lpOverlapped=0x0) returned 1 [0028.198] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.198] GetLastError () returned 0x0 [0028.198] SetLastError (dwErrCode=0x0) [0028.198] GetLastError () returned 0x0 [0028.198] SetLastError (dwErrCode=0x0) [0028.198] WriteFile (in: hFile=0x64, lpBuffer=0x556c50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x38e124, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesWritten=0x38e124*=0x8, lpOverlapped=0x0) returned 1 [0028.198] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.198] GetLastError () returned 0x0 [0028.198] SetLastError (dwErrCode=0x0) [0028.199] GetLastError () returned 0x0 [0028.199] SetLastError (dwErrCode=0x0) [0028.199] WriteFile (in: hFile=0x64, lpBuffer=0x556c50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x38e124, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesWritten=0x38e124*=0x8, lpOverlapped=0x0) returned 1 [0028.199] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.199] GetLastError () returned 0x0 [0028.199] SetLastError (dwErrCode=0x0) [0028.199] GetLastError () returned 0x0 [0028.199] SetLastError (dwErrCode=0x0) [0028.199] WriteFile (in: hFile=0x64, lpBuffer=0x556c50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x38e124, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesWritten=0x38e124*=0x8, lpOverlapped=0x0) returned 1 [0028.199] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.199] GetLastError () returned 0x0 [0028.199] SetLastError (dwErrCode=0x0) [0028.199] GetLastError () returned 0x0 [0028.199] SetLastError (dwErrCode=0x0) [0028.199] WriteFile (in: hFile=0x64, lpBuffer=0x556c50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x38e124, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesWritten=0x38e124*=0x8, lpOverlapped=0x0) returned 1 [0028.200] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.200] GetLastError () returned 0x0 [0028.200] SetLastError (dwErrCode=0x0) [0028.200] GetLastError () returned 0x0 [0028.200] SetLastError (dwErrCode=0x0) [0028.200] WriteFile (in: hFile=0x64, lpBuffer=0x556c50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x38e124, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesWritten=0x38e124*=0x8, lpOverlapped=0x0) returned 1 [0028.200] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.200] GetLastError () returned 0x0 [0028.200] SetLastError (dwErrCode=0x0) [0028.200] GetLastError () returned 0x0 [0028.200] SetLastError (dwErrCode=0x0) [0028.200] WriteFile (in: hFile=0x64, lpBuffer=0x556c50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x38e124, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesWritten=0x38e124*=0x8, lpOverlapped=0x0) returned 1 [0028.200] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.200] GetLastError () returned 0x0 [0028.200] SetLastError (dwErrCode=0x0) [0028.200] GetLastError () returned 0x0 [0028.200] SetLastError (dwErrCode=0x0) [0028.201] WriteFile (in: hFile=0x64, lpBuffer=0x556c50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x38e124, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesWritten=0x38e124*=0x8, lpOverlapped=0x0) returned 1 [0028.201] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.201] GetLastError () returned 0x0 [0028.201] SetLastError (dwErrCode=0x0) [0028.201] GetLastError () returned 0x0 [0028.201] SetLastError (dwErrCode=0x0) [0028.201] WriteFile (in: hFile=0x64, lpBuffer=0x556c50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x38e124, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesWritten=0x38e124*=0x8, lpOverlapped=0x0) returned 1 [0028.201] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.201] GetLastError () returned 0x0 [0028.201] SetLastError (dwErrCode=0x0) [0028.201] GetLastError () returned 0x0 [0028.201] SetLastError (dwErrCode=0x0) [0028.201] WriteFile (in: hFile=0x64, lpBuffer=0x556c50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x38e124, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesWritten=0x38e124*=0x8, lpOverlapped=0x0) returned 1 [0028.201] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.201] GetLastError () returned 0x0 [0028.202] SetLastError (dwErrCode=0x0) [0028.202] GetLastError () returned 0x0 [0028.202] SetLastError (dwErrCode=0x0) [0028.202] WriteFile (in: hFile=0x64, lpBuffer=0x556c50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x38e124, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesWritten=0x38e124*=0x8, lpOverlapped=0x0) returned 1 [0028.202] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.202] GetLastError () returned 0x0 [0028.202] SetLastError (dwErrCode=0x0) [0028.202] GetLastError () returned 0x0 [0028.202] SetLastError (dwErrCode=0x0) [0028.202] WriteFile (in: hFile=0x64, lpBuffer=0x556c50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x38e124, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesWritten=0x38e124*=0x8, lpOverlapped=0x0) returned 1 [0028.202] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.202] GetLastError () returned 0x0 [0028.202] SetLastError (dwErrCode=0x0) [0028.202] GetLastError () returned 0x0 [0028.202] SetLastError (dwErrCode=0x0) [0028.202] WriteFile (in: hFile=0x64, lpBuffer=0x556c50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x38e124, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesWritten=0x38e124*=0x8, lpOverlapped=0x0) returned 1 [0028.203] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.203] GetLastError () returned 0x0 [0028.203] SetLastError (dwErrCode=0x0) [0028.203] GetLastError () returned 0x0 [0028.203] SetLastError (dwErrCode=0x0) [0028.204] WriteFile (in: hFile=0x64, lpBuffer=0x556c50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x38e124, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesWritten=0x38e124*=0x8, lpOverlapped=0x0) returned 1 [0028.204] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e180 | out: lpNewFilePointer=0x0) returned 1 [0028.204] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e114 | out: lpNewFilePointer=0x0) returned 1 [0028.204] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x2f0, lpNewFilePointer=0x0, dwMoveMethod=0x38e190 | out: lpNewFilePointer=0x0) returned 1 [0028.204] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e144 | out: lpNewFilePointer=0x0) returned 1 [0028.205] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.205] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1f4 | out: lpNewFilePointer=0x0) returned 1 [0028.205] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e188 | out: lpNewFilePointer=0x0) returned 1 [0028.205] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x2f0, lpNewFilePointer=0x0, dwMoveMethod=0x38e204 | out: lpNewFilePointer=0x0) returned 1 [0028.205] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1b8 | out: lpNewFilePointer=0x0) returned 1 [0028.205] GetLastError () returned 0x0 [0028.205] SetLastError (dwErrCode=0x0) [0028.205] GetLastError () returned 0x0 [0028.206] SetLastError (dwErrCode=0x0) [0028.206] WriteFile (in: hFile=0x64, lpBuffer=0x556c50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x38e124, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesWritten=0x38e124*=0x8, lpOverlapped=0x0) returned 1 [0028.206] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e180 | out: lpNewFilePointer=0x0) returned 1 [0028.206] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e114 | out: lpNewFilePointer=0x0) returned 1 [0028.206] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x2f8, lpNewFilePointer=0x0, dwMoveMethod=0x38e190 | out: lpNewFilePointer=0x0) returned 1 [0028.206] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e144 | out: lpNewFilePointer=0x0) returned 1 [0028.206] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.207] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1f4 | out: lpNewFilePointer=0x0) returned 1 [0028.207] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e188 | out: lpNewFilePointer=0x0) returned 1 [0028.207] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x2f8, lpNewFilePointer=0x0, dwMoveMethod=0x38e204 | out: lpNewFilePointer=0x0) returned 1 [0028.207] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1b8 | out: lpNewFilePointer=0x0) returned 1 [0028.207] GetLastError () returned 0x0 [0028.207] SetLastError (dwErrCode=0x0) [0028.207] GetLastError () returned 0x0 [0028.207] SetLastError (dwErrCode=0x0) [0028.207] WriteFile (in: hFile=0x64, lpBuffer=0x556c50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x38e124, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesWritten=0x38e124*=0x8, lpOverlapped=0x0) returned 1 [0028.208] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e180 | out: lpNewFilePointer=0x0) returned 1 [0028.208] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e114 | out: lpNewFilePointer=0x0) returned 1 [0028.208] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x300, lpNewFilePointer=0x0, dwMoveMethod=0x38e190 | out: lpNewFilePointer=0x0) returned 1 [0028.208] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e144 | out: lpNewFilePointer=0x0) returned 1 [0028.208] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.208] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1f4 | out: lpNewFilePointer=0x0) returned 1 [0028.208] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e188 | out: lpNewFilePointer=0x0) returned 1 [0028.209] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x300, lpNewFilePointer=0x0, dwMoveMethod=0x38e204 | out: lpNewFilePointer=0x0) returned 1 [0028.209] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1b8 | out: lpNewFilePointer=0x0) returned 1 [0028.209] GetLastError () returned 0x0 [0028.209] SetLastError (dwErrCode=0x0) [0028.209] GetLastError () returned 0x0 [0028.209] SetLastError (dwErrCode=0x0) [0028.209] WriteFile (in: hFile=0x64, lpBuffer=0x556c50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x38e124, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesWritten=0x38e124*=0x8, lpOverlapped=0x0) returned 1 [0028.209] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e180 | out: lpNewFilePointer=0x0) returned 1 [0028.209] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e114 | out: lpNewFilePointer=0x0) returned 1 [0028.210] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x308, lpNewFilePointer=0x0, dwMoveMethod=0x38e190 | out: lpNewFilePointer=0x0) returned 1 [0028.210] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e144 | out: lpNewFilePointer=0x0) returned 1 [0028.210] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.210] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1f4 | out: lpNewFilePointer=0x0) returned 1 [0028.210] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e188 | out: lpNewFilePointer=0x0) returned 1 [0028.210] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x308, lpNewFilePointer=0x0, dwMoveMethod=0x38e204 | out: lpNewFilePointer=0x0) returned 1 [0028.210] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1b8 | out: lpNewFilePointer=0x0) returned 1 [0028.211] GetLastError () returned 0x0 [0028.211] SetLastError (dwErrCode=0x0) [0028.211] GetLastError () returned 0x0 [0028.211] SetLastError (dwErrCode=0x0) [0028.211] WriteFile (in: hFile=0x64, lpBuffer=0x556c50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x38e124, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesWritten=0x38e124*=0x8, lpOverlapped=0x0) returned 1 [0028.211] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e180 | out: lpNewFilePointer=0x0) returned 1 [0028.211] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e114 | out: lpNewFilePointer=0x0) returned 1 [0028.211] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x310, lpNewFilePointer=0x0, dwMoveMethod=0x38e190 | out: lpNewFilePointer=0x0) returned 1 [0028.211] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e144 | out: lpNewFilePointer=0x0) returned 1 [0028.212] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.212] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1f4 | out: lpNewFilePointer=0x0) returned 1 [0028.212] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e188 | out: lpNewFilePointer=0x0) returned 1 [0028.212] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x310, lpNewFilePointer=0x0, dwMoveMethod=0x38e204 | out: lpNewFilePointer=0x0) returned 1 [0028.212] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1b8 | out: lpNewFilePointer=0x0) returned 1 [0028.212] GetLastError () returned 0x0 [0028.213] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e180 | out: lpNewFilePointer=0x0) returned 1 [0028.213] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e114 | out: lpNewFilePointer=0x0) returned 1 [0028.214] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x318, lpNewFilePointer=0x0, dwMoveMethod=0x38e190 | out: lpNewFilePointer=0x0) returned 1 [0028.214] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e144 | out: lpNewFilePointer=0x0) returned 1 [0028.214] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.214] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1f4 | out: lpNewFilePointer=0x0) returned 1 [0028.214] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e188 | out: lpNewFilePointer=0x0) returned 1 [0028.214] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x318, lpNewFilePointer=0x0, dwMoveMethod=0x38e204 | out: lpNewFilePointer=0x0) returned 1 [0028.215] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1b8 | out: lpNewFilePointer=0x0) returned 1 [0028.215] GetLastError () returned 0x0 [0028.215] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e180 | out: lpNewFilePointer=0x0) returned 1 [0028.215] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e114 | out: lpNewFilePointer=0x0) returned 1 [0028.215] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x320, lpNewFilePointer=0x0, dwMoveMethod=0x38e190 | out: lpNewFilePointer=0x0) returned 1 [0028.215] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e144 | out: lpNewFilePointer=0x0) returned 1 [0028.215] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.216] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1f4 | out: lpNewFilePointer=0x0) returned 1 [0028.216] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e188 | out: lpNewFilePointer=0x0) returned 1 [0028.216] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x320, lpNewFilePointer=0x0, dwMoveMethod=0x38e204 | out: lpNewFilePointer=0x0) returned 1 [0028.216] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1b8 | out: lpNewFilePointer=0x0) returned 1 [0028.216] GetLastError () returned 0x0 [0028.216] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e180 | out: lpNewFilePointer=0x0) returned 1 [0028.216] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e114 | out: lpNewFilePointer=0x0) returned 1 [0028.216] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x328, lpNewFilePointer=0x0, dwMoveMethod=0x38e190 | out: lpNewFilePointer=0x0) returned 1 [0028.216] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e144 | out: lpNewFilePointer=0x0) returned 1 [0028.217] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.217] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1f4 | out: lpNewFilePointer=0x0) returned 1 [0028.217] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e188 | out: lpNewFilePointer=0x0) returned 1 [0028.217] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x328, lpNewFilePointer=0x0, dwMoveMethod=0x38e204 | out: lpNewFilePointer=0x0) returned 1 [0028.217] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1b8 | out: lpNewFilePointer=0x0) returned 1 [0028.217] GetLastError () returned 0x0 [0028.217] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e180 | out: lpNewFilePointer=0x0) returned 1 [0028.218] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e114 | out: lpNewFilePointer=0x0) returned 1 [0028.218] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x330, lpNewFilePointer=0x0, dwMoveMethod=0x38e190 | out: lpNewFilePointer=0x0) returned 1 [0028.218] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e144 | out: lpNewFilePointer=0x0) returned 1 [0028.218] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.218] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1f4 | out: lpNewFilePointer=0x0) returned 1 [0028.218] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e188 | out: lpNewFilePointer=0x0) returned 1 [0028.220] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x330, lpNewFilePointer=0x0, dwMoveMethod=0x38e204 | out: lpNewFilePointer=0x0) returned 1 [0028.220] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1b8 | out: lpNewFilePointer=0x0) returned 1 [0028.220] GetLastError () returned 0x0 [0028.220] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e180 | out: lpNewFilePointer=0x0) returned 1 [0028.221] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e114 | out: lpNewFilePointer=0x0) returned 1 [0028.221] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x338, lpNewFilePointer=0x0, dwMoveMethod=0x38e190 | out: lpNewFilePointer=0x0) returned 1 [0028.221] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e144 | out: lpNewFilePointer=0x0) returned 1 [0028.221] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.221] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1f4 | out: lpNewFilePointer=0x0) returned 1 [0028.221] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e188 | out: lpNewFilePointer=0x0) returned 1 [0028.221] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x338, lpNewFilePointer=0x0, dwMoveMethod=0x38e204 | out: lpNewFilePointer=0x0) returned 1 [0028.222] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1b8 | out: lpNewFilePointer=0x0) returned 1 [0028.222] GetLastError () returned 0x0 [0028.222] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e180 | out: lpNewFilePointer=0x0) returned 1 [0028.222] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e114 | out: lpNewFilePointer=0x0) returned 1 [0028.222] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x340, lpNewFilePointer=0x0, dwMoveMethod=0x38e190 | out: lpNewFilePointer=0x0) returned 1 [0028.222] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e144 | out: lpNewFilePointer=0x0) returned 1 [0028.222] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.223] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1f4 | out: lpNewFilePointer=0x0) returned 1 [0028.223] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e188 | out: lpNewFilePointer=0x0) returned 1 [0028.223] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x340, lpNewFilePointer=0x0, dwMoveMethod=0x38e204 | out: lpNewFilePointer=0x0) returned 1 [0028.223] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1b8 | out: lpNewFilePointer=0x0) returned 1 [0028.223] GetLastError () returned 0x0 [0028.223] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e180 | out: lpNewFilePointer=0x0) returned 1 [0028.223] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e114 | out: lpNewFilePointer=0x0) returned 1 [0028.223] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x348, lpNewFilePointer=0x0, dwMoveMethod=0x38e190 | out: lpNewFilePointer=0x0) returned 1 [0028.223] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e144 | out: lpNewFilePointer=0x0) returned 1 [0028.224] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.224] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1f4 | out: lpNewFilePointer=0x0) returned 1 [0028.224] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e188 | out: lpNewFilePointer=0x0) returned 1 [0028.224] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x348, lpNewFilePointer=0x0, dwMoveMethod=0x38e204 | out: lpNewFilePointer=0x0) returned 1 [0028.224] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1b8 | out: lpNewFilePointer=0x0) returned 1 [0028.224] GetLastError () returned 0x0 [0028.224] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e180 | out: lpNewFilePointer=0x0) returned 1 [0028.224] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e114 | out: lpNewFilePointer=0x0) returned 1 [0028.225] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x350, lpNewFilePointer=0x0, dwMoveMethod=0x38e190 | out: lpNewFilePointer=0x0) returned 1 [0028.225] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e144 | out: lpNewFilePointer=0x0) returned 1 [0028.225] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.225] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1f4 | out: lpNewFilePointer=0x0) returned 1 [0028.225] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e188 | out: lpNewFilePointer=0x0) returned 1 [0028.225] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x350, lpNewFilePointer=0x0, dwMoveMethod=0x38e204 | out: lpNewFilePointer=0x0) returned 1 [0028.225] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1b8 | out: lpNewFilePointer=0x0) returned 1 [0028.226] GetLastError () returned 0x0 [0028.226] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e180 | out: lpNewFilePointer=0x0) returned 1 [0028.226] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e114 | out: lpNewFilePointer=0x0) returned 1 [0028.226] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x358, lpNewFilePointer=0x0, dwMoveMethod=0x38e190 | out: lpNewFilePointer=0x0) returned 1 [0028.226] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e144 | out: lpNewFilePointer=0x0) returned 1 [0028.226] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.226] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1f4 | out: lpNewFilePointer=0x0) returned 1 [0028.227] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e188 | out: lpNewFilePointer=0x0) returned 1 [0028.227] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x358, lpNewFilePointer=0x0, dwMoveMethod=0x38e204 | out: lpNewFilePointer=0x0) returned 1 [0028.227] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1b8 | out: lpNewFilePointer=0x0) returned 1 [0028.227] GetLastError () returned 0x0 [0028.227] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e180 | out: lpNewFilePointer=0x0) returned 1 [0028.227] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e114 | out: lpNewFilePointer=0x0) returned 1 [0028.227] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x360, lpNewFilePointer=0x0, dwMoveMethod=0x38e190 | out: lpNewFilePointer=0x0) returned 1 [0028.227] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e144 | out: lpNewFilePointer=0x0) returned 1 [0028.228] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.228] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1f4 | out: lpNewFilePointer=0x0) returned 1 [0028.228] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e188 | out: lpNewFilePointer=0x0) returned 1 [0028.228] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x360, lpNewFilePointer=0x0, dwMoveMethod=0x38e204 | out: lpNewFilePointer=0x0) returned 1 [0028.228] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1b8 | out: lpNewFilePointer=0x0) returned 1 [0028.228] GetLastError () returned 0x0 [0028.228] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e180 | out: lpNewFilePointer=0x0) returned 1 [0028.228] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e114 | out: lpNewFilePointer=0x0) returned 1 [0028.228] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x368, lpNewFilePointer=0x0, dwMoveMethod=0x38e190 | out: lpNewFilePointer=0x0) returned 1 [0028.229] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e144 | out: lpNewFilePointer=0x0) returned 1 [0028.229] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.229] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1f4 | out: lpNewFilePointer=0x0) returned 1 [0028.229] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e188 | out: lpNewFilePointer=0x0) returned 1 [0028.229] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x368, lpNewFilePointer=0x0, dwMoveMethod=0x38e204 | out: lpNewFilePointer=0x0) returned 1 [0028.229] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1b8 | out: lpNewFilePointer=0x0) returned 1 [0028.229] GetLastError () returned 0x0 [0028.229] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e180 | out: lpNewFilePointer=0x0) returned 1 [0028.230] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e114 | out: lpNewFilePointer=0x0) returned 1 [0028.230] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x370, lpNewFilePointer=0x0, dwMoveMethod=0x38e190 | out: lpNewFilePointer=0x0) returned 1 [0028.230] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e144 | out: lpNewFilePointer=0x0) returned 1 [0028.230] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.230] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1f4 | out: lpNewFilePointer=0x0) returned 1 [0028.230] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e188 | out: lpNewFilePointer=0x0) returned 1 [0028.231] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x370, lpNewFilePointer=0x0, dwMoveMethod=0x38e204 | out: lpNewFilePointer=0x0) returned 1 [0028.231] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1b8 | out: lpNewFilePointer=0x0) returned 1 [0028.231] GetLastError () returned 0x0 [0028.231] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e180 | out: lpNewFilePointer=0x0) returned 1 [0028.231] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e114 | out: lpNewFilePointer=0x0) returned 1 [0028.231] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x378, lpNewFilePointer=0x0, dwMoveMethod=0x38e190 | out: lpNewFilePointer=0x0) returned 1 [0028.231] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e144 | out: lpNewFilePointer=0x0) returned 1 [0028.231] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.232] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1f4 | out: lpNewFilePointer=0x0) returned 1 [0028.232] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e188 | out: lpNewFilePointer=0x0) returned 1 [0028.232] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x378, lpNewFilePointer=0x0, dwMoveMethod=0x38e204 | out: lpNewFilePointer=0x0) returned 1 [0028.232] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1b8 | out: lpNewFilePointer=0x0) returned 1 [0028.232] GetLastError () returned 0x0 [0028.232] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e180 | out: lpNewFilePointer=0x0) returned 1 [0028.232] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e114 | out: lpNewFilePointer=0x0) returned 1 [0028.232] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x380, lpNewFilePointer=0x0, dwMoveMethod=0x38e190 | out: lpNewFilePointer=0x0) returned 1 [0028.233] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e144 | out: lpNewFilePointer=0x0) returned 1 [0028.233] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.233] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1f4 | out: lpNewFilePointer=0x0) returned 1 [0028.233] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e188 | out: lpNewFilePointer=0x0) returned 1 [0028.233] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x380, lpNewFilePointer=0x0, dwMoveMethod=0x38e204 | out: lpNewFilePointer=0x0) returned 1 [0028.233] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1b8 | out: lpNewFilePointer=0x0) returned 1 [0028.233] GetLastError () returned 0x0 [0028.233] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e180 | out: lpNewFilePointer=0x0) returned 1 [0028.234] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e114 | out: lpNewFilePointer=0x0) returned 1 [0028.234] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x388, lpNewFilePointer=0x0, dwMoveMethod=0x38e190 | out: lpNewFilePointer=0x0) returned 1 [0028.234] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e144 | out: lpNewFilePointer=0x0) returned 1 [0028.234] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.234] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1f4 | out: lpNewFilePointer=0x0) returned 1 [0028.234] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e188 | out: lpNewFilePointer=0x0) returned 1 [0028.234] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x388, lpNewFilePointer=0x0, dwMoveMethod=0x38e204 | out: lpNewFilePointer=0x0) returned 1 [0028.235] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1b8 | out: lpNewFilePointer=0x0) returned 1 [0028.235] GetLastError () returned 0x0 [0028.235] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e180 | out: lpNewFilePointer=0x0) returned 1 [0028.235] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e114 | out: lpNewFilePointer=0x0) returned 1 [0028.235] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x390, lpNewFilePointer=0x0, dwMoveMethod=0x38e190 | out: lpNewFilePointer=0x0) returned 1 [0028.235] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e144 | out: lpNewFilePointer=0x0) returned 1 [0028.235] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.236] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1f4 | out: lpNewFilePointer=0x0) returned 1 [0028.236] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e188 | out: lpNewFilePointer=0x0) returned 1 [0028.236] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x390, lpNewFilePointer=0x0, dwMoveMethod=0x38e204 | out: lpNewFilePointer=0x0) returned 1 [0028.236] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1b8 | out: lpNewFilePointer=0x0) returned 1 [0028.236] GetLastError () returned 0x0 [0028.236] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e180 | out: lpNewFilePointer=0x0) returned 1 [0028.236] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e114 | out: lpNewFilePointer=0x0) returned 1 [0028.236] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x398, lpNewFilePointer=0x0, dwMoveMethod=0x38e190 | out: lpNewFilePointer=0x0) returned 1 [0028.236] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e144 | out: lpNewFilePointer=0x0) returned 1 [0028.237] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.237] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1f4 | out: lpNewFilePointer=0x0) returned 1 [0028.237] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e188 | out: lpNewFilePointer=0x0) returned 1 [0028.237] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x398, lpNewFilePointer=0x0, dwMoveMethod=0x38e204 | out: lpNewFilePointer=0x0) returned 1 [0028.237] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1b8 | out: lpNewFilePointer=0x0) returned 1 [0028.237] GetLastError () returned 0x0 [0028.237] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e180 | out: lpNewFilePointer=0x0) returned 1 [0028.237] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e114 | out: lpNewFilePointer=0x0) returned 1 [0028.238] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x3a0, lpNewFilePointer=0x0, dwMoveMethod=0x38e190 | out: lpNewFilePointer=0x0) returned 1 [0028.238] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e144 | out: lpNewFilePointer=0x0) returned 1 [0028.238] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.238] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1f4 | out: lpNewFilePointer=0x0) returned 1 [0028.239] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e188 | out: lpNewFilePointer=0x0) returned 1 [0028.239] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x3a0, lpNewFilePointer=0x0, dwMoveMethod=0x38e204 | out: lpNewFilePointer=0x0) returned 1 [0028.239] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1b8 | out: lpNewFilePointer=0x0) returned 1 [0028.239] GetLastError () returned 0x0 [0028.240] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e180 | out: lpNewFilePointer=0x0) returned 1 [0028.240] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e114 | out: lpNewFilePointer=0x0) returned 1 [0028.240] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x3a8, lpNewFilePointer=0x0, dwMoveMethod=0x38e190 | out: lpNewFilePointer=0x0) returned 1 [0028.240] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e144 | out: lpNewFilePointer=0x0) returned 1 [0028.240] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.240] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1f4 | out: lpNewFilePointer=0x0) returned 1 [0028.240] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e188 | out: lpNewFilePointer=0x0) returned 1 [0028.241] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x3a8, lpNewFilePointer=0x0, dwMoveMethod=0x38e204 | out: lpNewFilePointer=0x0) returned 1 [0028.241] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1b8 | out: lpNewFilePointer=0x0) returned 1 [0028.241] GetLastError () returned 0x0 [0028.241] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e180 | out: lpNewFilePointer=0x0) returned 1 [0028.241] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e114 | out: lpNewFilePointer=0x0) returned 1 [0028.241] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x3b0, lpNewFilePointer=0x0, dwMoveMethod=0x38e190 | out: lpNewFilePointer=0x0) returned 1 [0028.241] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e144 | out: lpNewFilePointer=0x0) returned 1 [0028.241] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.242] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1f4 | out: lpNewFilePointer=0x0) returned 1 [0028.242] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e188 | out: lpNewFilePointer=0x0) returned 1 [0028.242] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x3b0, lpNewFilePointer=0x0, dwMoveMethod=0x38e204 | out: lpNewFilePointer=0x0) returned 1 [0028.242] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1b8 | out: lpNewFilePointer=0x0) returned 1 [0028.242] GetLastError () returned 0x0 [0028.242] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e180 | out: lpNewFilePointer=0x0) returned 1 [0028.242] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e114 | out: lpNewFilePointer=0x0) returned 1 [0028.242] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x3b8, lpNewFilePointer=0x0, dwMoveMethod=0x38e190 | out: lpNewFilePointer=0x0) returned 1 [0028.242] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e144 | out: lpNewFilePointer=0x0) returned 1 [0028.243] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.243] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1f4 | out: lpNewFilePointer=0x0) returned 1 [0028.243] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e188 | out: lpNewFilePointer=0x0) returned 1 [0028.243] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x3b8, lpNewFilePointer=0x0, dwMoveMethod=0x38e204 | out: lpNewFilePointer=0x0) returned 1 [0028.243] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1b8 | out: lpNewFilePointer=0x0) returned 1 [0028.243] GetLastError () returned 0x0 [0028.243] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e180 | out: lpNewFilePointer=0x0) returned 1 [0028.244] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e114 | out: lpNewFilePointer=0x0) returned 1 [0028.244] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x3c0, lpNewFilePointer=0x0, dwMoveMethod=0x38e190 | out: lpNewFilePointer=0x0) returned 1 [0028.244] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e144 | out: lpNewFilePointer=0x0) returned 1 [0028.244] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.244] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1f4 | out: lpNewFilePointer=0x0) returned 1 [0028.244] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e188 | out: lpNewFilePointer=0x0) returned 1 [0028.244] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x3c0, lpNewFilePointer=0x0, dwMoveMethod=0x38e204 | out: lpNewFilePointer=0x0) returned 1 [0028.244] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1b8 | out: lpNewFilePointer=0x0) returned 1 [0028.244] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e180 | out: lpNewFilePointer=0x0) returned 1 [0028.244] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e114 | out: lpNewFilePointer=0x0) returned 1 [0028.244] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x3c8, lpNewFilePointer=0x0, dwMoveMethod=0x38e190 | out: lpNewFilePointer=0x0) returned 1 [0028.244] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e144 | out: lpNewFilePointer=0x0) returned 1 [0028.245] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.245] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1f4 | out: lpNewFilePointer=0x0) returned 1 [0028.245] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e188 | out: lpNewFilePointer=0x0) returned 1 [0028.245] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x3c8, lpNewFilePointer=0x0, dwMoveMethod=0x38e204 | out: lpNewFilePointer=0x0) returned 1 [0028.245] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1b8 | out: lpNewFilePointer=0x0) returned 1 [0028.245] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e180 | out: lpNewFilePointer=0x0) returned 1 [0028.245] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e114 | out: lpNewFilePointer=0x0) returned 1 [0028.245] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x3d0, lpNewFilePointer=0x0, dwMoveMethod=0x38e190 | out: lpNewFilePointer=0x0) returned 1 [0028.245] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e144 | out: lpNewFilePointer=0x0) returned 1 [0028.245] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.245] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1f4 | out: lpNewFilePointer=0x0) returned 1 [0028.246] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e188 | out: lpNewFilePointer=0x0) returned 1 [0028.246] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x3d0, lpNewFilePointer=0x0, dwMoveMethod=0x38e204 | out: lpNewFilePointer=0x0) returned 1 [0028.246] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1b8 | out: lpNewFilePointer=0x0) returned 1 [0028.246] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e180 | out: lpNewFilePointer=0x0) returned 1 [0028.246] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e114 | out: lpNewFilePointer=0x0) returned 1 [0028.246] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x3d8, lpNewFilePointer=0x0, dwMoveMethod=0x38e190 | out: lpNewFilePointer=0x0) returned 1 [0028.246] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e144 | out: lpNewFilePointer=0x0) returned 1 [0028.246] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.246] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1f4 | out: lpNewFilePointer=0x0) returned 1 [0028.246] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e188 | out: lpNewFilePointer=0x0) returned 1 [0028.246] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x3d8, lpNewFilePointer=0x0, dwMoveMethod=0x38e204 | out: lpNewFilePointer=0x0) returned 1 [0028.247] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1b8 | out: lpNewFilePointer=0x0) returned 1 [0028.247] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e180 | out: lpNewFilePointer=0x0) returned 1 [0028.247] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e114 | out: lpNewFilePointer=0x0) returned 1 [0028.247] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x3e0, lpNewFilePointer=0x0, dwMoveMethod=0x38e190 | out: lpNewFilePointer=0x0) returned 1 [0028.247] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e144 | out: lpNewFilePointer=0x0) returned 1 [0028.247] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.247] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1f4 | out: lpNewFilePointer=0x0) returned 1 [0028.247] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e188 | out: lpNewFilePointer=0x0) returned 1 [0028.247] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x3e0, lpNewFilePointer=0x0, dwMoveMethod=0x38e204 | out: lpNewFilePointer=0x0) returned 1 [0028.247] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e1b8 | out: lpNewFilePointer=0x0) returned 1 [0028.247] SetFilePointerEx (in: hFile=0x64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38e180 | out: lpNewFilePointer=0x0) returned 1 [0028.248] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.248] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.248] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.248] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.248] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.248] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.248] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.249] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.249] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.249] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.249] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.249] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.249] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.249] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.249] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.249] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.250] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.257] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.257] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.257] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.257] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.257] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.257] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.258] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.258] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.258] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.258] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.258] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.258] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.258] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.258] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.258] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.259] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.259] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.259] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.259] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.259] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.259] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.259] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.259] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.259] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.260] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.260] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.260] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.260] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.260] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.260] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.260] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.260] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.260] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.260] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.261] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.261] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.261] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.261] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.261] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.261] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.261] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.261] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.261] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.262] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.262] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.262] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.262] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.262] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.262] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.262] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.262] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.262] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.263] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.263] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.263] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.265] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.265] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.265] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.265] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.265] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.265] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.265] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.265] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.265] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.265] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.266] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.266] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.266] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.266] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.266] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.266] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.266] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.266] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.266] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.267] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.267] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.267] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.267] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.267] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.267] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.267] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.267] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.267] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.267] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.267] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.268] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.268] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.268] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.268] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.268] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.268] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.268] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.268] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.268] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.268] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.268] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.269] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.269] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.269] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.269] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.269] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.269] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.269] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.269] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.269] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.269] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.269] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.270] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.270] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.270] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.270] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.270] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.270] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.270] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.270] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.270] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.270] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.270] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.271] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.271] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.271] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.271] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.271] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.271] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.271] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.271] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.271] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.271] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.271] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.271] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.272] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.272] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.272] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.272] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.272] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.272] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.272] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.272] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.272] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.272] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.272] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.273] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.273] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.273] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.273] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.273] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.273] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.273] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.273] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.273] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.273] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.273] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.274] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.274] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.274] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.274] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.274] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.274] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.274] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.274] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.274] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.274] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.274] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.274] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.275] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.275] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.275] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.275] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.275] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.275] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.275] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.275] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.275] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.275] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.275] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.275] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.276] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.276] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.276] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.276] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.276] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.276] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.276] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.276] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.276] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.276] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.276] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.276] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.276] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.277] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.277] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.277] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.277] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.277] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.277] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.277] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.277] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.277] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.277] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.277] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.278] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.278] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.278] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.278] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.278] ReadFile (in: hFile=0x64, lpBuffer=0x556c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38e128, lpOverlapped=0x0 | out: lpBuffer=0x556c50*, lpNumberOfBytesRead=0x38e128*=0x1000, lpOverlapped=0x0) returned 1 [0028.370] AreFileApisANSI () returned 1 [0028.370] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38e9f0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 22 [0028.370] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x549570, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 29 [0028.370] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x66) returned 0x552690 [0028.370] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38e9f0, cbMultiByte=-1, lpWideCharStr=0x552690, cchWideChar=22 | out: lpWideCharStr="C:\\\\Boot\\BOOTSTAT.DAT") returned 22 [0028.370] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x549570, cbMultiByte=-1, lpWideCharStr=0x5526bc, cchWideChar=29 | out: lpWideCharStr="C:\\\\Boot\\BOOTSTAT.DAT.masked") returned 29 [0028.370] MoveFileExW (lpExistingFileName="C:\\\\Boot\\BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat"), lpNewFileName="C:\\\\Boot\\BOOTSTAT.DAT.masked" (normalized: "c:\\boot\\bootstat.dat.masked"), dwFlags=0x2) returned 1 [0028.375] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552690 | out: hHeap=0x530000) returned 1 [0028.375] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x549570 | out: hHeap=0x530000) returned 1 [0028.375] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x549548 | out: hHeap=0x530000) returned 1 [0028.375] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548070 | out: hHeap=0x530000) returned 1 [0028.375] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547bb0 | out: hHeap=0x530000) returned 1 [0028.375] FindNextFileA (in: hFindFile=0x547a90, lpFindFileData=0x38e4b0 | out: lpFindFileData=0x38e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac015040, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffffffe, dwReserved1=0x7716387a, cFileName="cs-CZ", cAlternateFileName="")) returned 1 [0028.375] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x120) returned 0x552690 [0028.375] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x30) returned 0x548070 [0028.375] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8) returned 0x547bb0 [0028.375] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8) returned 0x547ad0 [0028.376] AreFileApisANSI () returned 1 [0028.376] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x548070, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 44 [0028.376] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x58) returned 0x5527b8 [0028.376] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x548070, cbMultiByte=-1, lpWideCharStr=0x5527b8, cchWideChar=44 | out: lpWideCharStr="C:\\\\Boot\\cs-CZ\\@@_OpenTheBrowserTOR_@@.html") returned 44 [0028.376] CreateFileW (lpFileName="C:\\\\Boot\\cs-CZ\\@@_OpenTheBrowserTOR_@@.html" (normalized: "c:\\boot\\cs-cz\\@@_openthebrowsertor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x38d84c, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x64 [0028.376] GetFileType (hFile=0x64) returned 0x1 [0028.376] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5527b8 | out: hHeap=0x530000) returned 1 [0028.376] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x556c50 [0028.376] GetLastError () returned 0x0 [0028.378] AreFileApisANSI () returned 1 [0028.378] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x548358, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 49 [0028.378] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x62) returned 0x5527b8 [0028.378] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x548358, cbMultiByte=-1, lpWideCharStr=0x5527b8, cchWideChar=49 | out: lpWideCharStr="C:\\\\Boot\\cs-CZ\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html") returned 49 [0028.378] CreateFileW (lpFileName="C:\\\\Boot\\cs-CZ\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html" (normalized: "c:\\boot\\cs-cz\\@@_îòêðûòü_â_áðàóçåðå_tor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x38d84c, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x64 [0028.380] GetFileType (hFile=0x64) returned 0x1 [0028.380] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5527b8 | out: hHeap=0x530000) returned 1 [0028.380] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x556c50 [0028.380] GetLastError () returned 0x0 [0028.381] FindFirstFileA (in: lpFileName="C:\\\\Boot\\cs-CZ\\*", lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x648e7060, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x648e7060, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x71000273, dwReserved1=0x1f9, cFileName=".", cAlternateFileName="")) returned 0x547ad0 [0028.381] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x648e7060, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x648e7060, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x71000273, dwReserved1=0x1f9, cFileName="..", cAlternateFileName="")) returned 1 [0028.381] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x648e7060, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x648e7060, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x648e7060, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x71000273, dwReserved1=0x1f9, cFileName="@@_OpenTheBrowserTOR_@@.html", cAlternateFileName="@@_OPE~1.HTM")) returned 1 [0028.381] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x30) returned 0x548070 [0028.381] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x30) returned 0x557c58 [0028.381] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x557c58 | out: hHeap=0x530000) returned 1 [0028.381] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20) returned 0x549548 [0028.381] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x549548 | out: hHeap=0x530000) returned 1 [0028.381] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548070 | out: hHeap=0x530000) returned 1 [0028.381] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x648e7060, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x648e7060, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x648e7060, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x530000, dwReserved1=0x557c50, cFileName="@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html", cAlternateFileName="@@____~1.HTM")) returned 1 [0028.381] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x40) returned 0x548358 [0028.381] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x40) returned 0x5483e8 [0028.381] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5483e8 | out: hHeap=0x530000) returned 1 [0028.381] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x30) returned 0x548070 [0028.381] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548070 | out: hHeap=0x530000) returned 1 [0028.381] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548358 | out: hHeap=0x530000) returned 1 [0028.381] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c50, dwReserved0=0x38d9d4, dwReserved1=0x77163c74, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0028.382] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20) returned 0x549548 [0028.382] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20) returned 0x549570 [0028.382] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x549570 | out: hHeap=0x530000) returned 1 [0028.382] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x549548 | out: hHeap=0x530000) returned 1 [0028.382] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c50, dwReserved0=0x38d9d4, dwReserved1=0x77163c74, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0028.382] FindClose (in: hFindFile=0x547ad0 | out: hFindFile=0x547ad0) returned 1 [0028.382] FindNextFileA (in: hFindFile=0x547a90, lpFindFileData=0x38e4b0 | out: lpFindFileData=0x38e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffffffe, dwReserved1=0x7716387a, cFileName="da-DK", cAlternateFileName="")) returned 1 [0028.382] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x120) returned 0x552690 [0028.382] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x30) returned 0x548070 [0028.382] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8) returned 0x547bb0 [0028.382] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8) returned 0x547ad0 [0028.382] AreFileApisANSI () returned 1 [0028.382] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x548070, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 44 [0028.382] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x58) returned 0x5527b8 [0028.382] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x548070, cbMultiByte=-1, lpWideCharStr=0x5527b8, cchWideChar=44 | out: lpWideCharStr="C:\\\\Boot\\da-DK\\@@_OpenTheBrowserTOR_@@.html") returned 44 [0028.382] CreateFileW (lpFileName="C:\\\\Boot\\da-DK\\@@_OpenTheBrowserTOR_@@.html" (normalized: "c:\\boot\\da-dk\\@@_openthebrowsertor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x38d84c, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x64 [0028.383] GetFileType (hFile=0x64) returned 0x1 [0028.383] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5527b8 | out: hHeap=0x530000) returned 1 [0028.383] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x556c50 [0028.383] GetLastError () returned 0x0 [0028.384] AreFileApisANSI () returned 1 [0028.384] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x548358, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 49 [0028.384] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x62) returned 0x5527b8 [0028.384] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x548358, cbMultiByte=-1, lpWideCharStr=0x5527b8, cchWideChar=49 | out: lpWideCharStr="C:\\\\Boot\\da-DK\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html") returned 49 [0028.384] CreateFileW (lpFileName="C:\\\\Boot\\da-DK\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html" (normalized: "c:\\boot\\da-dk\\@@_îòêðûòü_â_áðàóçåðå_tor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x38d84c, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x64 [0028.385] GetFileType (hFile=0x64) returned 0x1 [0028.385] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5527b8 | out: hHeap=0x530000) returned 1 [0028.386] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x556c50 [0028.386] GetLastError () returned 0x0 [0028.386] FindFirstFileA (in: lpFileName="C:\\\\Boot\\da-DK\\*", lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x648e7060, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x648e7060, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x71000273, dwReserved1=0x1f9, cFileName=".", cAlternateFileName="")) returned 0x547ad0 [0028.387] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x648e7060, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x648e7060, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x71000273, dwReserved1=0x1f9, cFileName="..", cAlternateFileName="")) returned 1 [0028.387] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x648e7060, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x648e7060, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x648e7060, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x71000273, dwReserved1=0x1f9, cFileName="@@_OpenTheBrowserTOR_@@.html", cAlternateFileName="@@_OPE~1.HTM")) returned 1 [0028.387] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x30) returned 0x548070 [0028.387] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x30) returned 0x557c58 [0028.387] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x557c58 | out: hHeap=0x530000) returned 1 [0028.387] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20) returned 0x549548 [0028.387] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x549548 | out: hHeap=0x530000) returned 1 [0028.387] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548070 | out: hHeap=0x530000) returned 1 [0028.387] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x648e7060, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x648e7060, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x648e7060, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x530000, dwReserved1=0x557c50, cFileName="@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html", cAlternateFileName="@@____~1.HTM")) returned 1 [0028.387] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x40) returned 0x548358 [0028.387] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x40) returned 0x5483e8 [0028.387] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5483e8 | out: hHeap=0x530000) returned 1 [0028.387] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x30) returned 0x548070 [0028.387] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548070 | out: hHeap=0x530000) returned 1 [0028.387] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548358 | out: hHeap=0x530000) returned 1 [0028.387] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x38d9d4, dwReserved1=0x77163c74, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0028.387] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20) returned 0x549548 [0028.387] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20) returned 0x549570 [0028.387] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x549570 | out: hHeap=0x530000) returned 1 [0028.387] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x549548 | out: hHeap=0x530000) returned 1 [0028.387] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x38d9d4, dwReserved1=0x77163c74, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0028.387] FindClose (in: hFindFile=0x547ad0 | out: hFindFile=0x547ad0) returned 1 [0028.387] FindNextFileA (in: hFindFile=0x547a90, lpFindFileData=0x38e4b0 | out: lpFindFileData=0x38e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffffffe, dwReserved1=0x7716387a, cFileName="de-DE", cAlternateFileName="")) returned 1 [0028.387] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x120) returned 0x552690 [0028.387] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x30) returned 0x548070 [0028.388] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8) returned 0x547bb0 [0028.388] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8) returned 0x547ad0 [0028.388] AreFileApisANSI () returned 1 [0028.388] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x548070, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 44 [0028.388] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x58) returned 0x5527b8 [0028.388] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x548070, cbMultiByte=-1, lpWideCharStr=0x5527b8, cchWideChar=44 | out: lpWideCharStr="C:\\\\Boot\\de-DE\\@@_OpenTheBrowserTOR_@@.html") returned 44 [0028.388] CreateFileW (lpFileName="C:\\\\Boot\\de-DE\\@@_OpenTheBrowserTOR_@@.html" (normalized: "c:\\boot\\de-de\\@@_openthebrowsertor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x38d84c, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x64 [0028.389] GetFileType (hFile=0x64) returned 0x1 [0028.389] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5527b8 | out: hHeap=0x530000) returned 1 [0028.389] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x556c50 [0028.389] GetLastError () returned 0x0 [0028.390] AreFileApisANSI () returned 1 [0028.390] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x548358, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 49 [0028.390] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x62) returned 0x5527b8 [0028.390] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x548358, cbMultiByte=-1, lpWideCharStr=0x5527b8, cchWideChar=49 | out: lpWideCharStr="C:\\\\Boot\\de-DE\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html") returned 49 [0028.390] CreateFileW (lpFileName="C:\\\\Boot\\de-DE\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html" (normalized: "c:\\boot\\de-de\\@@_îòêðûòü_â_áðàóçåðå_tor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x38d84c, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x64 [0028.392] GetFileType (hFile=0x64) returned 0x1 [0028.392] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5527b8 | out: hHeap=0x530000) returned 1 [0028.392] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x556c50 [0028.392] GetLastError () returned 0x0 [0028.393] FindFirstFileA (in: lpFileName="C:\\\\Boot\\de-DE\\*", lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x6490d1c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x6490d1c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x71000273, dwReserved1=0x1f9, cFileName=".", cAlternateFileName="")) returned 0x547ad0 [0028.393] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x6490d1c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x6490d1c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x71000273, dwReserved1=0x1f9, cFileName="..", cAlternateFileName="")) returned 1 [0028.393] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x648e7060, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x648e7060, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x648e7060, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x71000273, dwReserved1=0x1f9, cFileName="@@_OpenTheBrowserTOR_@@.html", cAlternateFileName="@@_OPE~1.HTM")) returned 1 [0028.393] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x30) returned 0x548070 [0028.393] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x30) returned 0x557c58 [0028.393] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x557c58 | out: hHeap=0x530000) returned 1 [0028.393] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20) returned 0x549548 [0028.393] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x549548 | out: hHeap=0x530000) returned 1 [0028.393] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548070 | out: hHeap=0x530000) returned 1 [0028.393] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6490d1c0, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x6490d1c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x6490d1c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x530000, dwReserved1=0x557c50, cFileName="@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html", cAlternateFileName="@@____~1.HTM")) returned 1 [0028.393] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x40) returned 0x548358 [0028.393] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x40) returned 0x5483e8 [0028.393] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5483e8 | out: hHeap=0x530000) returned 1 [0028.394] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x30) returned 0x548070 [0028.394] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548070 | out: hHeap=0x530000) returned 1 [0028.394] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548358 | out: hHeap=0x530000) returned 1 [0028.394] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8132526, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16640, dwReserved0=0x38d9d4, dwReserved1=0x77163c74, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0028.394] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20) returned 0x549548 [0028.394] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20) returned 0x549570 [0028.394] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x549570 | out: hHeap=0x530000) returned 1 [0028.394] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x549548 | out: hHeap=0x530000) returned 1 [0028.394] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8132526, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16640, dwReserved0=0x38d9d4, dwReserved1=0x77163c74, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0028.394] FindClose (in: hFindFile=0x547ad0 | out: hFindFile=0x547ad0) returned 1 [0028.394] FindNextFileA (in: hFindFile=0x547a90, lpFindFileData=0x38e4b0 | out: lpFindFileData=0x38e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffffffe, dwReserved1=0x7716387a, cFileName="el-GR", cAlternateFileName="")) returned 1 [0028.394] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x120) returned 0x552690 [0028.394] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x30) returned 0x548070 [0028.394] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8) returned 0x547bb0 [0028.394] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8) returned 0x547ad0 [0028.394] AreFileApisANSI () returned 1 [0028.394] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x548070, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 44 [0028.394] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x58) returned 0x5527b8 [0028.394] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x548070, cbMultiByte=-1, lpWideCharStr=0x5527b8, cchWideChar=44 | out: lpWideCharStr="C:\\\\Boot\\el-GR\\@@_OpenTheBrowserTOR_@@.html") returned 44 [0028.394] CreateFileW (lpFileName="C:\\\\Boot\\el-GR\\@@_OpenTheBrowserTOR_@@.html" (normalized: "c:\\boot\\el-gr\\@@_openthebrowsertor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x38d84c, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x64 [0028.395] GetFileType (hFile=0x64) returned 0x1 [0028.395] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5527b8 | out: hHeap=0x530000) returned 1 [0028.395] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x556c50 [0028.395] GetLastError () returned 0x0 [0028.396] AreFileApisANSI () returned 1 [0028.396] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x548358, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 49 [0028.396] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x62) returned 0x5527b8 [0028.396] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x548358, cbMultiByte=-1, lpWideCharStr=0x5527b8, cchWideChar=49 | out: lpWideCharStr="C:\\\\Boot\\el-GR\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html") returned 49 [0028.396] CreateFileW (lpFileName="C:\\\\Boot\\el-GR\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html" (normalized: "c:\\boot\\el-gr\\@@_îòêðûòü_â_áðàóçåðå_tor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x38d84c, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x64 [0028.398] GetFileType (hFile=0x64) returned 0x1 [0028.398] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5527b8 | out: hHeap=0x530000) returned 1 [0028.398] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x556c50 [0028.398] GetLastError () returned 0x0 [0028.399] FindFirstFileA (in: lpFileName="C:\\\\Boot\\el-GR\\*", lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x6490d1c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x6490d1c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x71000273, dwReserved1=0x1f9, cFileName=".", cAlternateFileName="")) returned 0x547ad0 [0028.399] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x6490d1c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x6490d1c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x71000273, dwReserved1=0x1f9, cFileName="..", cAlternateFileName="")) returned 1 [0028.399] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6490d1c0, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x6490d1c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x6490d1c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x71000273, dwReserved1=0x1f9, cFileName="@@_OpenTheBrowserTOR_@@.html", cAlternateFileName="@@_OPE~1.HTM")) returned 1 [0028.399] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x30) returned 0x548070 [0028.399] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x30) returned 0x557c58 [0028.399] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x557c58 | out: hHeap=0x530000) returned 1 [0028.399] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20) returned 0x549548 [0028.399] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x549548 | out: hHeap=0x530000) returned 1 [0028.399] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548070 | out: hHeap=0x530000) returned 1 [0028.399] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6490d1c0, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x6490d1c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x6490d1c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x530000, dwReserved1=0x557c50, cFileName="@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html", cAlternateFileName="@@____~1.HTM")) returned 1 [0028.399] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x40) returned 0x548358 [0028.399] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x40) returned 0x5483e8 [0028.399] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5483e8 | out: hHeap=0x530000) returned 1 [0028.399] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x30) returned 0x548070 [0028.399] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548070 | out: hHeap=0x530000) returned 1 [0028.399] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548358 | out: hHeap=0x530000) returned 1 [0028.399] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea239054, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x17250, dwReserved0=0x38d9d4, dwReserved1=0x77163c74, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0028.399] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20) returned 0x549548 [0028.399] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20) returned 0x549570 [0028.399] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x549570 | out: hHeap=0x530000) returned 1 [0028.399] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x549548 | out: hHeap=0x530000) returned 1 [0028.399] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea239054, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x17250, dwReserved0=0x38d9d4, dwReserved1=0x77163c74, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0028.399] FindClose (in: hFindFile=0x547ad0 | out: hFindFile=0x547ad0) returned 1 [0028.399] FindNextFileA (in: hFindFile=0x547a90, lpFindFileData=0x38e4b0 | out: lpFindFileData=0x38e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffffffe, dwReserved1=0x7716387a, cFileName="en-US", cAlternateFileName="")) returned 1 [0028.400] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x120) returned 0x552690 [0028.400] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x30) returned 0x548070 [0028.400] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8) returned 0x547bb0 [0028.400] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8) returned 0x547ad0 [0028.400] AreFileApisANSI () returned 1 [0028.400] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x548070, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 44 [0028.400] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x58) returned 0x5527b8 [0028.400] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x548070, cbMultiByte=-1, lpWideCharStr=0x5527b8, cchWideChar=44 | out: lpWideCharStr="C:\\\\Boot\\en-US\\@@_OpenTheBrowserTOR_@@.html") returned 44 [0028.400] CreateFileW (lpFileName="C:\\\\Boot\\en-US\\@@_OpenTheBrowserTOR_@@.html" (normalized: "c:\\boot\\en-us\\@@_openthebrowsertor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x38d84c, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x64 [0028.402] GetFileType (hFile=0x64) returned 0x1 [0028.402] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5527b8 | out: hHeap=0x530000) returned 1 [0028.402] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x556c50 [0028.402] GetLastError () returned 0x0 [0028.403] AreFileApisANSI () returned 1 [0028.403] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x548358, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 49 [0028.403] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x62) returned 0x5527b8 [0028.403] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x548358, cbMultiByte=-1, lpWideCharStr=0x5527b8, cchWideChar=49 | out: lpWideCharStr="C:\\\\Boot\\en-US\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html") returned 49 [0028.403] CreateFileW (lpFileName="C:\\\\Boot\\en-US\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html" (normalized: "c:\\boot\\en-us\\@@_îòêðûòü_â_áðàóçåðå_tor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x38d84c, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x64 [0028.404] GetFileType (hFile=0x64) returned 0x1 [0028.404] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5527b8 | out: hHeap=0x530000) returned 1 [0028.404] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x556c50 [0028.404] GetLastError () returned 0x0 [0028.405] FindFirstFileA (in: lpFileName="C:\\\\Boot\\en-US\\*", lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x6490d1c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x6490d1c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x71000273, dwReserved1=0x1f9, cFileName=".", cAlternateFileName="")) returned 0x547ad0 [0028.406] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x6490d1c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x6490d1c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x71000273, dwReserved1=0x1f9, cFileName="..", cAlternateFileName="")) returned 1 [0028.406] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6490d1c0, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x6490d1c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x6490d1c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x71000273, dwReserved1=0x1f9, cFileName="@@_OpenTheBrowserTOR_@@.html", cAlternateFileName="@@_OPE~1.HTM")) returned 1 [0028.406] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x30) returned 0x548070 [0028.406] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x30) returned 0x557c58 [0028.406] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x557c58 | out: hHeap=0x530000) returned 1 [0028.406] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20) returned 0x549548 [0028.406] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x549548 | out: hHeap=0x530000) returned 1 [0028.406] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548070 | out: hHeap=0x530000) returned 1 [0028.406] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6490d1c0, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x6490d1c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x6490d1c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x530000, dwReserved1=0x557c50, cFileName="@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html", cAlternateFileName="@@____~1.HTM")) returned 1 [0028.406] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x40) returned 0x548358 [0028.406] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x40) returned 0x5483e8 [0028.406] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5483e8 | out: hHeap=0x530000) returned 1 [0028.406] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x30) returned 0x548070 [0028.406] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548070 | out: hHeap=0x530000) returned 1 [0028.406] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548358 | out: hHeap=0x530000) returned 1 [0028.406] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x14c40, dwReserved0=0x38d9d4, dwReserved1=0x77163c74, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0028.407] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20) returned 0x549548 [0028.407] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20) returned 0x549570 [0028.407] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x549570 | out: hHeap=0x530000) returned 1 [0028.407] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x549548 | out: hHeap=0x530000) returned 1 [0028.407] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xc3080a8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xaa50, dwReserved0=0x38d9d4, dwReserved1=0x77163c74, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0028.407] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20) returned 0x549548 [0028.407] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20) returned 0x549570 [0028.407] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x549570 | out: hHeap=0x530000) returned 1 [0028.407] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x549548 | out: hHeap=0x530000) returned 1 [0028.407] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xc3080a8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xaa50, dwReserved0=0x38d9d4, dwReserved1=0x77163c74, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0028.407] FindClose (in: hFindFile=0x547ad0 | out: hFindFile=0x547ad0) returned 1 [0028.407] FindNextFileA (in: hFindFile=0x547a90, lpFindFileData=0x38e4b0 | out: lpFindFileData=0x38e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffffffe, dwReserved1=0x7716387a, cFileName="es-ES", cAlternateFileName="")) returned 1 [0028.407] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x120) returned 0x552690 [0028.407] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x30) returned 0x548070 [0028.407] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8) returned 0x547bb0 [0028.407] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8) returned 0x547ad0 [0028.407] AreFileApisANSI () returned 1 [0028.407] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x548070, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 44 [0028.407] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x58) returned 0x5527b8 [0028.407] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x548070, cbMultiByte=-1, lpWideCharStr=0x5527b8, cchWideChar=44 | out: lpWideCharStr="C:\\\\Boot\\es-ES\\@@_OpenTheBrowserTOR_@@.html") returned 44 [0028.408] CreateFileW (lpFileName="C:\\\\Boot\\es-ES\\@@_OpenTheBrowserTOR_@@.html" (normalized: "c:\\boot\\es-es\\@@_openthebrowsertor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x38d84c, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x64 [0028.409] GetFileType (hFile=0x64) returned 0x1 [0028.409] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5527b8 | out: hHeap=0x530000) returned 1 [0028.409] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x556c50 [0028.409] GetLastError () returned 0x0 [0028.410] AreFileApisANSI () returned 1 [0028.410] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x548358, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 49 [0028.410] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x62) returned 0x5527b8 [0028.410] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x548358, cbMultiByte=-1, lpWideCharStr=0x5527b8, cchWideChar=49 | out: lpWideCharStr="C:\\\\Boot\\es-ES\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html") returned 49 [0028.410] CreateFileW (lpFileName="C:\\\\Boot\\es-ES\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html" (normalized: "c:\\boot\\es-es\\@@_îòêðûòü_â_áðàóçåðå_tor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x38d84c, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x64 [0028.412] GetFileType (hFile=0x64) returned 0x1 [0028.412] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5527b8 | out: hHeap=0x530000) returned 1 [0028.412] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x556c50 [0028.412] GetLastError () returned 0x0 [0028.413] FindFirstFileA (in: lpFileName="C:\\\\Boot\\es-ES\\*", lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x64933320, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x64933320, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x71000273, dwReserved1=0x1f9, cFileName=".", cAlternateFileName="")) returned 0x547ad0 [0028.413] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x64933320, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x64933320, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x71000273, dwReserved1=0x1f9, cFileName="..", cAlternateFileName="")) returned 1 [0028.413] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64933320, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x64933320, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x64933320, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x71000273, dwReserved1=0x1f9, cFileName="@@_OpenTheBrowserTOR_@@.html", cAlternateFileName="@@_OPE~1.HTM")) returned 1 [0028.413] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x30) returned 0x548070 [0028.413] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x30) returned 0x557c58 [0028.413] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x557c58 | out: hHeap=0x530000) returned 1 [0028.413] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20) returned 0x549548 [0028.413] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x549548 | out: hHeap=0x530000) returned 1 [0028.413] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548070 | out: hHeap=0x530000) returned 1 [0028.413] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64933320, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x64933320, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x64933320, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x530000, dwReserved1=0x557c50, cFileName="@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html", cAlternateFileName="@@____~1.HTM")) returned 1 [0028.413] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x40) returned 0x548358 [0028.413] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x40) returned 0x5483e8 [0028.413] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5483e8 | out: hHeap=0x530000) returned 1 [0028.413] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x30) returned 0x548070 [0028.413] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548070 | out: hHeap=0x530000) returned 1 [0028.413] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548358 | out: hHeap=0x530000) returned 1 [0028.413] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84ea6d7, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x38d9d4, dwReserved1=0x77163c74, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0028.413] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20) returned 0x549548 [0028.413] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20) returned 0x549570 [0028.413] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x549570 | out: hHeap=0x530000) returned 1 [0028.413] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x549548 | out: hHeap=0x530000) returned 1 [0028.413] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84ea6d7, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x38d9d4, dwReserved1=0x77163c74, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0028.413] FindClose (in: hFindFile=0x547ad0 | out: hFindFile=0x547ad0) returned 1 [0028.414] FindNextFileA (in: hFindFile=0x547a90, lpFindFileData=0x38e4b0 | out: lpFindFileData=0x38e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffffffe, dwReserved1=0x7716387a, cFileName="fi-FI", cAlternateFileName="")) returned 1 [0028.414] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x120) returned 0x552690 [0028.414] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x30) returned 0x548070 [0028.414] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8) returned 0x547bb0 [0028.414] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8) returned 0x547ad0 [0028.414] AreFileApisANSI () returned 1 [0028.414] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x548070, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 44 [0028.414] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x58) returned 0x5527b8 [0028.414] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x548070, cbMultiByte=-1, lpWideCharStr=0x5527b8, cchWideChar=44 | out: lpWideCharStr="C:\\\\Boot\\fi-FI\\@@_OpenTheBrowserTOR_@@.html") returned 44 [0028.414] CreateFileW (lpFileName="C:\\\\Boot\\fi-FI\\@@_OpenTheBrowserTOR_@@.html" (normalized: "c:\\boot\\fi-fi\\@@_openthebrowsertor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x38d84c, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x64 [0028.414] GetFileType (hFile=0x64) returned 0x1 [0028.414] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5527b8 | out: hHeap=0x530000) returned 1 [0028.415] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x556c50 [0028.415] GetLastError () returned 0x0 [0028.415] AreFileApisANSI () returned 1 [0028.415] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x548358, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 49 [0028.415] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x62) returned 0x5527b8 [0028.416] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x548358, cbMultiByte=-1, lpWideCharStr=0x5527b8, cchWideChar=49 | out: lpWideCharStr="C:\\\\Boot\\fi-FI\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html") returned 49 [0028.416] CreateFileW (lpFileName="C:\\\\Boot\\fi-FI\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html" (normalized: "c:\\boot\\fi-fi\\@@_îòêðûòü_â_áðàóçåðå_tor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x38d84c, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x64 [0028.417] GetFileType (hFile=0x64) returned 0x1 [0028.417] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5527b8 | out: hHeap=0x530000) returned 1 [0028.417] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x556c50 [0028.417] GetLastError () returned 0x0 [0028.418] FindFirstFileA (in: lpFileName="C:\\\\Boot\\fi-FI\\*", lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x64933320, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x64933320, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x71000273, dwReserved1=0x1f9, cFileName=".", cAlternateFileName="")) returned 0x547ad0 [0028.419] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x64933320, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x64933320, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x71000273, dwReserved1=0x1f9, cFileName="..", cAlternateFileName="")) returned 1 [0028.419] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64933320, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x64933320, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x64933320, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x71000273, dwReserved1=0x1f9, cFileName="@@_OpenTheBrowserTOR_@@.html", cAlternateFileName="@@_OPE~1.HTM")) returned 1 [0028.419] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x30) returned 0x548070 [0028.419] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x30) returned 0x557c58 [0028.419] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x557c58 | out: hHeap=0x530000) returned 1 [0028.419] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20) returned 0x549548 [0028.419] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x549548 | out: hHeap=0x530000) returned 1 [0028.419] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548070 | out: hHeap=0x530000) returned 1 [0028.419] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64933320, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x64933320, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x64933320, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x530000, dwReserved1=0x557c50, cFileName="@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html", cAlternateFileName="@@____~1.HTM")) returned 1 [0028.419] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x40) returned 0x548358 [0028.419] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x40) returned 0x5483e8 [0028.419] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5483e8 | out: hHeap=0x530000) returned 1 [0028.419] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x30) returned 0x548070 [0028.419] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548070 | out: hHeap=0x530000) returned 1 [0028.419] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548358 | out: hHeap=0x530000) returned 1 [0028.419] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe836d95d, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c40, dwReserved0=0x38d9d4, dwReserved1=0x77163c74, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0028.419] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20) returned 0x549548 [0028.419] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20) returned 0x549570 [0028.419] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x549570 | out: hHeap=0x530000) returned 1 [0028.419] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x549548 | out: hHeap=0x530000) returned 1 [0028.419] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe836d95d, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c40, dwReserved0=0x38d9d4, dwReserved1=0x77163c74, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0028.419] FindClose (in: hFindFile=0x547ad0 | out: hFindFile=0x547ad0) returned 1 [0028.419] FindNextFileA (in: hFindFile=0x547a90, lpFindFileData=0x38e4b0 | out: lpFindFileData=0x38e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac276640, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffffffe, dwReserved1=0x7716387a, cFileName="Fonts", cAlternateFileName="")) returned 1 [0028.419] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x120) returned 0x552690 [0028.419] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x30) returned 0x548070 [0028.419] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8) returned 0x547bb0 [0028.419] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8) returned 0x547ad0 [0028.420] AreFileApisANSI () returned 1 [0028.420] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x548070, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 44 [0028.420] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x58) returned 0x5527b8 [0028.420] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x548070, cbMultiByte=-1, lpWideCharStr=0x5527b8, cchWideChar=44 | out: lpWideCharStr="C:\\\\Boot\\Fonts\\@@_OpenTheBrowserTOR_@@.html") returned 44 [0028.420] CreateFileW (lpFileName="C:\\\\Boot\\Fonts\\@@_OpenTheBrowserTOR_@@.html" (normalized: "c:\\boot\\fonts\\@@_openthebrowsertor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x38d84c, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x64 [0028.426] GetFileType (hFile=0x64) returned 0x1 [0028.426] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5527b8 | out: hHeap=0x530000) returned 1 [0028.426] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x556c50 [0028.426] GetLastError () returned 0x0 [0028.427] AreFileApisANSI () returned 1 [0028.427] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x548358, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 49 [0028.427] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x62) returned 0x5527b8 [0028.427] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x548358, cbMultiByte=-1, lpWideCharStr=0x5527b8, cchWideChar=49 | out: lpWideCharStr="C:\\\\Boot\\Fonts\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html") returned 49 [0028.427] CreateFileW (lpFileName="C:\\\\Boot\\Fonts\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html" (normalized: "c:\\boot\\fonts\\@@_îòêðûòü_â_áðàóçåðå_tor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x38d84c, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x64 [0028.428] GetFileType (hFile=0x64) returned 0x1 [0028.428] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5527b8 | out: hHeap=0x530000) returned 1 [0028.428] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x556c50 [0028.428] GetLastError () returned 0x0 [0028.429] FindFirstFileA (in: lpFileName="C:\\\\Boot\\Fonts\\*", lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x64959480, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x64959480, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x71000273, dwReserved1=0x1f9, cFileName=".", cAlternateFileName="")) returned 0x547ad0 [0028.430] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x64959480, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x64959480, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x71000273, dwReserved1=0x1f9, cFileName="..", cAlternateFileName="")) returned 1 [0028.430] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64933320, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x64933320, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x64959480, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x71000273, dwReserved1=0x1f9, cFileName="@@_OpenTheBrowserTOR_@@.html", cAlternateFileName="@@_OPE~1.HTM")) returned 1 [0028.430] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x30) returned 0x548070 [0028.430] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x30) returned 0x557c58 [0028.430] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x557c58 | out: hHeap=0x530000) returned 1 [0028.430] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20) returned 0x549548 [0028.430] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x549548 | out: hHeap=0x530000) returned 1 [0028.430] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548070 | out: hHeap=0x530000) returned 1 [0028.430] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64959480, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x64959480, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x64959480, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x530000, dwReserved1=0x557c50, cFileName="@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html", cAlternateFileName="@@____~1.HTM")) returned 1 [0028.430] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x40) returned 0x548358 [0028.430] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x40) returned 0x5483e8 [0028.430] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5483e8 | out: hHeap=0x530000) returned 1 [0028.430] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x30) returned 0x548070 [0028.430] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548070 | out: hHeap=0x530000) returned 1 [0028.430] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548358 | out: hHeap=0x530000) returned 1 [0028.430] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x64c5ad69, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x385e00, dwReserved0=0x38d9d4, dwReserved1=0x77163c74, cFileName="chs_boot.ttf", cAlternateFileName="")) returned 1 [0028.430] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20) returned 0x549548 [0028.430] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20) returned 0x549570 [0028.430] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x549570 | out: hHeap=0x530000) returned 1 [0028.430] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x549548 | out: hHeap=0x530000) returned 1 [0028.430] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac191e00, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac191e00, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x6505f253, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x3b27a4, dwReserved0=0x38d9d4, dwReserved1=0x77163c74, cFileName="cht_boot.ttf", cAlternateFileName="")) returned 1 [0028.430] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20) returned 0x549548 [0028.430] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20) returned 0x549570 [0028.430] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x549570 | out: hHeap=0x530000) returned 1 [0028.430] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x549548 | out: hHeap=0x530000) returned 1 [0028.430] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac204220, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac204220, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65274577, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x1e46e4, dwReserved0=0x38d9d4, dwReserved1=0x77163c74, cFileName="jpn_boot.ttf", cAlternateFileName="")) returned 1 [0028.430] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20) returned 0x549548 [0028.430] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20) returned 0x549570 [0028.430] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x549570 | out: hHeap=0x530000) returned 1 [0028.431] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x549548 | out: hHeap=0x530000) returned 1 [0028.431] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac22a380, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac22a380, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x6530caef, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x242f20, dwReserved0=0x38d9d4, dwReserved1=0x77163c74, cFileName="kor_boot.ttf", cAlternateFileName="")) returned 1 [0028.431] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20) returned 0x549548 [0028.431] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20) returned 0x549570 [0028.431] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x549570 | out: hHeap=0x530000) returned 1 [0028.431] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x549548 | out: hHeap=0x530000) returned 1 [0028.431] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac276640, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65332c4d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xb95c, dwReserved0=0x38d9d4, dwReserved1=0x77163c74, cFileName="wgl4_boot.ttf", cAlternateFileName="WGL4_B~1.TTF")) returned 1 [0028.431] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20) returned 0x549548 [0028.431] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20) returned 0x549570 [0028.431] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x549570 | out: hHeap=0x530000) returned 1 [0028.431] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x549548 | out: hHeap=0x530000) returned 1 [0028.431] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac276640, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65332c4d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xb95c, dwReserved0=0x38d9d4, dwReserved1=0x77163c74, cFileName="wgl4_boot.ttf", cAlternateFileName="WGL4_B~1.TTF")) returned 0 [0028.431] FindClose (in: hFindFile=0x547ad0 | out: hFindFile=0x547ad0) returned 1 [0028.431] FindNextFileA (in: hFindFile=0x547a90, lpFindFileData=0x38e4b0 | out: lpFindFileData=0x38e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffffffe, dwReserved1=0x7716387a, cFileName="fr-FR", cAlternateFileName="")) returned 1 [0028.431] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x120) returned 0x552690 [0028.431] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x30) returned 0x548070 [0028.431] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8) returned 0x547bb0 [0028.431] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8) returned 0x547ad0 [0028.431] AreFileApisANSI () returned 1 [0028.431] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x548070, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 44 [0028.431] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x58) returned 0x5527b8 [0028.431] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x548070, cbMultiByte=-1, lpWideCharStr=0x5527b8, cchWideChar=44 | out: lpWideCharStr="C:\\\\Boot\\fr-FR\\@@_OpenTheBrowserTOR_@@.html") returned 44 [0028.431] CreateFileW (lpFileName="C:\\\\Boot\\fr-FR\\@@_OpenTheBrowserTOR_@@.html" (normalized: "c:\\boot\\fr-fr\\@@_openthebrowsertor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x38d84c, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x64 [0028.433] GetFileType (hFile=0x64) returned 0x1 [0028.433] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5527b8 | out: hHeap=0x530000) returned 1 [0028.433] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x556c50 [0028.433] GetLastError () returned 0x0 [0028.434] AreFileApisANSI () returned 1 [0028.434] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x548358, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 49 [0028.434] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x62) returned 0x5527b8 [0028.434] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x548358, cbMultiByte=-1, lpWideCharStr=0x5527b8, cchWideChar=49 | out: lpWideCharStr="C:\\\\Boot\\fr-FR\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html") returned 49 [0028.434] CreateFileW (lpFileName="C:\\\\Boot\\fr-FR\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html" (normalized: "c:\\boot\\fr-fr\\@@_îòêðûòü_â_áðàóçåðå_tor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x38d84c, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x64 [0028.436] GetFileType (hFile=0x64) returned 0x1 [0028.436] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5527b8 | out: hHeap=0x530000) returned 1 [0028.436] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x556c50 [0028.436] GetLastError () returned 0x0 [0028.437] FindFirstFileA (in: lpFileName="C:\\\\Boot\\fr-FR\\*", lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x64959480, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x64959480, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x71000273, dwReserved1=0x1f9, cFileName=".", cAlternateFileName="")) returned 0x547ad0 [0028.437] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x64959480, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x64959480, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x71000273, dwReserved1=0x1f9, cFileName="..", cAlternateFileName="")) returned 1 [0028.437] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64959480, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x64959480, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x64959480, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x71000273, dwReserved1=0x1f9, cFileName="@@_OpenTheBrowserTOR_@@.html", cAlternateFileName="@@_OPE~1.HTM")) returned 1 [0028.437] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x30) returned 0x548070 [0028.437] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x30) returned 0x557c58 [0028.437] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x557c58 | out: hHeap=0x530000) returned 1 [0028.437] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20) returned 0x549548 [0028.437] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x549548 | out: hHeap=0x530000) returned 1 [0028.437] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548070 | out: hHeap=0x530000) returned 1 [0028.437] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64959480, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x64959480, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x64959480, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x530000, dwReserved1=0x557c50, cFileName="@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html", cAlternateFileName="@@____~1.HTM")) returned 1 [0028.438] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x40) returned 0x548358 [0028.438] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x40) returned 0x5483e8 [0028.438] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5483e8 | out: hHeap=0x530000) returned 1 [0028.438] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x30) returned 0x548070 [0028.438] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548070 | out: hHeap=0x530000) returned 1 [0028.438] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548358 | out: hHeap=0x530000) returned 1 [0028.438] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe86b3703, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16c40, dwReserved0=0x38d9d4, dwReserved1=0x77163c74, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0028.438] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20) returned 0x549548 [0028.438] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20) returned 0x549570 [0028.438] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x549570 | out: hHeap=0x530000) returned 1 [0028.438] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x549548 | out: hHeap=0x530000) returned 1 [0028.438] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe86b3703, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16c40, dwReserved0=0x38d9d4, dwReserved1=0x77163c74, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0028.438] FindClose (in: hFindFile=0x547ad0 | out: hFindFile=0x547ad0) returned 1 [0028.438] FindNextFileA (in: hFindFile=0x547a90, lpFindFileData=0x38e4b0 | out: lpFindFileData=0x38e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffffffe, dwReserved1=0x7716387a, cFileName="hu-HU", cAlternateFileName="")) returned 1 [0028.438] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x120) returned 0x552690 [0028.438] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x30) returned 0x548070 [0028.438] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8) returned 0x547bb0 [0028.438] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8) returned 0x547ad0 [0028.438] AreFileApisANSI () returned 1 [0028.438] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x548070, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 44 [0028.438] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x58) returned 0x5527b8 [0028.438] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x548070, cbMultiByte=-1, lpWideCharStr=0x5527b8, cchWideChar=44 | out: lpWideCharStr="C:\\\\Boot\\hu-HU\\@@_OpenTheBrowserTOR_@@.html") returned 44 [0028.438] CreateFileW (lpFileName="C:\\\\Boot\\hu-HU\\@@_OpenTheBrowserTOR_@@.html" (normalized: "c:\\boot\\hu-hu\\@@_openthebrowsertor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x38d84c, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x64 [0028.439] GetFileType (hFile=0x64) returned 0x1 [0028.439] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5527b8 | out: hHeap=0x530000) returned 1 [0028.439] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x556c50 [0028.439] GetLastError () returned 0x0 [0028.440] AreFileApisANSI () returned 1 [0028.440] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x548358, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 49 [0028.440] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x62) returned 0x5527b8 [0028.440] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x548358, cbMultiByte=-1, lpWideCharStr=0x5527b8, cchWideChar=49 | out: lpWideCharStr="C:\\\\Boot\\hu-HU\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html") returned 49 [0028.440] CreateFileW (lpFileName="C:\\\\Boot\\hu-HU\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html" (normalized: "c:\\boot\\hu-hu\\@@_îòêðûòü_â_áðàóçåðå_tor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x38d84c, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x64 [0028.444] GetFileType (hFile=0x64) returned 0x1 [0028.444] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5527b8 | out: hHeap=0x530000) returned 1 [0028.444] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x556c50 [0028.444] GetLastError () returned 0x0 [0028.445] FindFirstFileA (in: lpFileName="C:\\\\Boot\\hu-HU\\*", lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x6497f5e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x6497f5e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x71000273, dwReserved1=0x1f9, cFileName=".", cAlternateFileName="")) returned 0x547ad0 [0028.446] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x6497f5e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x6497f5e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x71000273, dwReserved1=0x1f9, cFileName="..", cAlternateFileName="")) returned 1 [0028.446] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6497f5e0, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x6497f5e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x6497f5e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x71000273, dwReserved1=0x1f9, cFileName="@@_OpenTheBrowserTOR_@@.html", cAlternateFileName="@@_OPE~1.HTM")) returned 1 [0028.446] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x30) returned 0x548070 [0028.446] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x30) returned 0x557c58 [0028.446] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x557c58 | out: hHeap=0x530000) returned 1 [0028.446] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20) returned 0x549548 [0028.446] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x549548 | out: hHeap=0x530000) returned 1 [0028.446] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548070 | out: hHeap=0x530000) returned 1 [0028.446] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6497f5e0, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x6497f5e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x6497f5e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x530000, dwReserved1=0x557c50, cFileName="@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html", cAlternateFileName="@@____~1.HTM")) returned 1 [0028.446] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x40) returned 0x548358 [0028.446] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x40) returned 0x5483e8 [0028.446] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5483e8 | out: hHeap=0x530000) returned 1 [0028.446] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x30) returned 0x548070 [0028.446] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548070 | out: hHeap=0x530000) returned 1 [0028.446] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548358 | out: hHeap=0x530000) returned 1 [0028.446] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe817e7d8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16240, dwReserved0=0x38d9d4, dwReserved1=0x77163c74, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0028.446] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20) returned 0x549548 [0028.446] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20) returned 0x549570 [0028.446] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x549570 | out: hHeap=0x530000) returned 1 [0028.446] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x549548 | out: hHeap=0x530000) returned 1 [0028.446] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe817e7d8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16240, dwReserved0=0x38d9d4, dwReserved1=0x77163c74, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0028.446] FindClose (in: hFindFile=0x547ad0 | out: hFindFile=0x547ad0) returned 1 [0028.446] FindNextFileA (in: hFindFile=0x547a90, lpFindFileData=0x38e4b0 | out: lpFindFileData=0x38e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffffffe, dwReserved1=0x7716387a, cFileName="it-IT", cAlternateFileName="")) returned 1 [0028.446] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x120) returned 0x552690 [0028.446] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x30) returned 0x548070 [0028.446] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8) returned 0x547bb0 [0028.446] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8) returned 0x547ad0 [0028.447] AreFileApisANSI () returned 1 [0028.447] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x548070, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 44 [0028.447] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x58) returned 0x5527b8 [0028.447] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x548070, cbMultiByte=-1, lpWideCharStr=0x5527b8, cchWideChar=44 | out: lpWideCharStr="C:\\\\Boot\\it-IT\\@@_OpenTheBrowserTOR_@@.html") returned 44 [0028.447] CreateFileW (lpFileName="C:\\\\Boot\\it-IT\\@@_OpenTheBrowserTOR_@@.html" (normalized: "c:\\boot\\it-it\\@@_openthebrowsertor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x38d84c, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x64 [0028.448] GetFileType (hFile=0x64) returned 0x1 [0028.448] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5527b8 | out: hHeap=0x530000) returned 1 [0028.448] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x556c50 [0028.448] GetLastError () returned 0x0 [0028.449] AreFileApisANSI () returned 1 [0028.449] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x548358, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 49 [0028.449] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x62) returned 0x5527b8 [0028.449] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x548358, cbMultiByte=-1, lpWideCharStr=0x5527b8, cchWideChar=49 | out: lpWideCharStr="C:\\\\Boot\\it-IT\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html") returned 49 [0028.449] CreateFileW (lpFileName="C:\\\\Boot\\it-IT\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html" (normalized: "c:\\boot\\it-it\\@@_îòêðûòü_â_áðàóçåðå_tor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x38d84c, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x64 [0028.451] GetFileType (hFile=0x64) returned 0x1 [0028.451] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5527b8 | out: hHeap=0x530000) returned 1 [0028.451] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x556c50 [0028.451] GetLastError () returned 0x0 [0028.452] FindFirstFileA (in: lpFileName="C:\\\\Boot\\it-IT\\*", lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x6497f5e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x6497f5e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x71000273, dwReserved1=0x1f9, cFileName=".", cAlternateFileName="")) returned 0x547ad0 [0028.452] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x6497f5e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x6497f5e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x71000273, dwReserved1=0x1f9, cFileName="..", cAlternateFileName="")) returned 1 [0028.452] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6497f5e0, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x6497f5e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x6497f5e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x71000273, dwReserved1=0x1f9, cFileName="@@_OpenTheBrowserTOR_@@.html", cAlternateFileName="@@_OPE~1.HTM")) returned 1 [0028.452] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x30) returned 0x548070 [0028.452] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x30) returned 0x557c58 [0028.452] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x557c58 | out: hHeap=0x530000) returned 1 [0028.452] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20) returned 0x549548 [0028.453] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x549548 | out: hHeap=0x530000) returned 1 [0028.453] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548070 | out: hHeap=0x530000) returned 1 [0028.453] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6497f5e0, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x6497f5e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x6497f5e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x530000, dwReserved1=0x557c50, cFileName="@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html", cAlternateFileName="@@____~1.HTM")) returned 1 [0028.453] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x40) returned 0x548358 [0028.453] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x40) returned 0x5483e8 [0028.453] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5483e8 | out: hHeap=0x530000) returned 1 [0028.453] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x30) returned 0x548070 [0028.453] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548070 | out: hHeap=0x530000) returned 1 [0028.453] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548358 | out: hHeap=0x530000) returned 1 [0028.453] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e80ea3, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x38d9d4, dwReserved1=0x77163c74, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0028.453] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20) returned 0x549548 [0028.453] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20) returned 0x549570 [0028.453] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x549570 | out: hHeap=0x530000) returned 1 [0028.453] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x549548 | out: hHeap=0x530000) returned 1 [0028.453] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e80ea3, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x38d9d4, dwReserved1=0x77163c74, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0028.453] FindClose (in: hFindFile=0x547ad0 | out: hFindFile=0x547ad0) returned 1 [0028.453] FindNextFileA (in: hFindFile=0x547a90, lpFindFileData=0x38e4b0 | out: lpFindFileData=0x38e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffffffe, dwReserved1=0x7716387a, cFileName="ja-JP", cAlternateFileName="")) returned 1 [0028.453] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x120) returned 0x552e90 [0028.453] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x30) returned 0x548070 [0028.453] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8) returned 0x547bb0 [0028.453] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8) returned 0x547ad0 [0028.454] AreFileApisANSI () returned 1 [0028.454] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x548070, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 44 [0028.454] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x58) returned 0x552fb8 [0028.454] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x548070, cbMultiByte=-1, lpWideCharStr=0x552fb8, cchWideChar=44 | out: lpWideCharStr="C:\\\\Boot\\ja-JP\\@@_OpenTheBrowserTOR_@@.html") returned 44 [0028.454] CreateFileW (lpFileName="C:\\\\Boot\\ja-JP\\@@_OpenTheBrowserTOR_@@.html" (normalized: "c:\\boot\\ja-jp\\@@_openthebrowsertor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x38d84c, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x64 [0028.454] GetFileType (hFile=0x64) returned 0x1 [0028.454] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552fb8 | out: hHeap=0x530000) returned 1 [0028.454] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x556c50 [0028.454] GetLastError () returned 0x0 [0028.455] AreFileApisANSI () returned 1 [0028.455] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x548358, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 49 [0028.455] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x62) returned 0x552fb8 [0028.455] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x548358, cbMultiByte=-1, lpWideCharStr=0x552fb8, cchWideChar=49 | out: lpWideCharStr="C:\\\\Boot\\ja-JP\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html") returned 49 [0028.455] CreateFileW (lpFileName="C:\\\\Boot\\ja-JP\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html" (normalized: "c:\\boot\\ja-jp\\@@_îòêðûòü_â_áðàóçåðå_tor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x38d84c, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x64 [0028.458] GetFileType (hFile=0x64) returned 0x1 [0028.458] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552fb8 | out: hHeap=0x530000) returned 1 [0028.458] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x556c50 [0028.458] GetLastError () returned 0x0 [0028.459] FindFirstFileA (in: lpFileName="C:\\\\Boot\\ja-JP\\*", lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x649a5740, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x649a5740, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x71000273, dwReserved1=0xf9, cFileName=".", cAlternateFileName="")) returned 0x547ad0 [0028.459] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x649a5740, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x649a5740, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x71000273, dwReserved1=0xf9, cFileName="..", cAlternateFileName="")) returned 1 [0028.459] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x649a5740, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x649a5740, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x649a5740, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x71000273, dwReserved1=0xf9, cFileName="@@_OpenTheBrowserTOR_@@.html", cAlternateFileName="@@_OPE~1.HTM")) returned 1 [0028.459] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x30) returned 0x548070 [0028.459] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x30) returned 0x557c58 [0028.459] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x557c58 | out: hHeap=0x530000) returned 1 [0028.459] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20) returned 0x549548 [0028.459] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x549548 | out: hHeap=0x530000) returned 1 [0028.459] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548070 | out: hHeap=0x530000) returned 1 [0028.459] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x649a5740, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x649a5740, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x649a5740, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x530000, dwReserved1=0x557c50, cFileName="@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html", cAlternateFileName="@@____~1.HTM")) returned 1 [0028.459] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x40) returned 0x548358 [0028.459] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x40) returned 0x5483e8 [0028.459] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5483e8 | out: hHeap=0x530000) returned 1 [0028.459] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x30) returned 0x548070 [0028.459] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548070 | out: hHeap=0x530000) returned 1 [0028.459] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548358 | out: hHeap=0x530000) returned 1 [0028.459] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12a40, dwReserved0=0x38d9d4, dwReserved1=0x77163c74, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0028.459] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20) returned 0x549548 [0028.459] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20) returned 0x549570 [0028.459] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x549570 | out: hHeap=0x530000) returned 1 [0028.460] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x549548 | out: hHeap=0x530000) returned 1 [0028.460] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12a40, dwReserved0=0x38d9d4, dwReserved1=0x77163c74, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0028.460] FindClose (in: hFindFile=0x547ad0 | out: hFindFile=0x547ad0) returned 1 [0028.460] FindNextFileA (in: hFindFile=0x547a90, lpFindFileData=0x38e4b0 | out: lpFindFileData=0x38e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffffffe, dwReserved1=0x7716387a, cFileName="ko-KR", cAlternateFileName="")) returned 1 [0028.460] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x120) returned 0x552e90 [0028.460] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x30) returned 0x548070 [0028.460] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8) returned 0x547bb0 [0028.460] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8) returned 0x547ad0 [0028.460] AreFileApisANSI () returned 1 [0028.460] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x548070, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 44 [0028.460] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x58) returned 0x552fb8 [0028.460] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x548070, cbMultiByte=-1, lpWideCharStr=0x552fb8, cchWideChar=44 | out: lpWideCharStr="C:\\\\Boot\\ko-KR\\@@_OpenTheBrowserTOR_@@.html") returned 44 [0028.460] CreateFileW (lpFileName="C:\\\\Boot\\ko-KR\\@@_OpenTheBrowserTOR_@@.html" (normalized: "c:\\boot\\ko-kr\\@@_openthebrowsertor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x38d84c, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x64 [0028.461] GetFileType (hFile=0x64) returned 0x1 [0028.461] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552fb8 | out: hHeap=0x530000) returned 1 [0028.461] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x556c50 [0028.461] GetLastError () returned 0x0 [0028.462] AreFileApisANSI () returned 1 [0028.462] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x548358, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 49 [0028.462] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x62) returned 0x552fb8 [0028.462] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x548358, cbMultiByte=-1, lpWideCharStr=0x552fb8, cchWideChar=49 | out: lpWideCharStr="C:\\\\Boot\\ko-KR\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html") returned 49 [0028.462] CreateFileW (lpFileName="C:\\\\Boot\\ko-KR\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html" (normalized: "c:\\boot\\ko-kr\\@@_îòêðûòü_â_áðàóçåðå_tor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x38d84c, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x64 [0028.464] GetFileType (hFile=0x64) returned 0x1 [0028.464] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552fb8 | out: hHeap=0x530000) returned 1 [0028.464] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x556c50 [0028.464] GetLastError () returned 0x0 [0028.465] FindFirstFileA (in: lpFileName="C:\\\\Boot\\ko-KR\\*", lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x649a5740, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x649a5740, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x71000273, dwReserved1=0xf9, cFileName=".", cAlternateFileName="")) returned 0x547ad0 [0028.466] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x649a5740, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x649a5740, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x71000273, dwReserved1=0xf9, cFileName="..", cAlternateFileName="")) returned 1 [0028.466] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x649a5740, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x649a5740, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x649a5740, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x71000273, dwReserved1=0xf9, cFileName="@@_OpenTheBrowserTOR_@@.html", cAlternateFileName="@@_OPE~1.HTM")) returned 1 [0028.466] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x30) returned 0x548070 [0028.466] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x30) returned 0x557c58 [0028.466] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x557c58 | out: hHeap=0x530000) returned 1 [0028.466] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20) returned 0x549548 [0028.466] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x549548 | out: hHeap=0x530000) returned 1 [0028.466] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548070 | out: hHeap=0x530000) returned 1 [0028.466] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x649a5740, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x649a5740, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x649a5740, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x530000, dwReserved1=0x557c50, cFileName="@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html", cAlternateFileName="@@____~1.HTM")) returned 1 [0028.466] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x40) returned 0x548358 [0028.466] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x40) returned 0x5483e8 [0028.466] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5483e8 | out: hHeap=0x530000) returned 1 [0028.466] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x30) returned 0x548070 [0028.466] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548070 | out: hHeap=0x530000) returned 1 [0028.466] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548358 | out: hHeap=0x530000) returned 1 [0028.466] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8510830, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12650, dwReserved0=0x38d9d4, dwReserved1=0x77163c74, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0028.466] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20) returned 0x549548 [0028.466] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20) returned 0x549570 [0028.466] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x549570 | out: hHeap=0x530000) returned 1 [0028.466] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x549548 | out: hHeap=0x530000) returned 1 [0028.466] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8510830, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12650, dwReserved0=0x38d9d4, dwReserved1=0x77163c74, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0028.466] FindClose (in: hFindFile=0x547ad0 | out: hFindFile=0x547ad0) returned 1 [0028.466] FindNextFileA (in: hFindFile=0x547a90, lpFindFileData=0x38e4b0 | out: lpFindFileData=0x38e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x8bc7dbfe, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x76980, dwReserved0=0xfffffffe, dwReserved1=0x7716387a, cFileName="memtest.exe", cAlternateFileName="")) returned 1 [0028.466] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20) returned 0x549548 [0028.466] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20) returned 0x549570 [0028.466] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x549570 | out: hHeap=0x530000) returned 1 [0028.466] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x549548 | out: hHeap=0x530000) returned 1 [0028.466] FindNextFileA (in: hFindFile=0x547a90, lpFindFileData=0x38e4b0 | out: lpFindFileData=0x38e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffffffe, dwReserved1=0x7716387a, cFileName="nb-NO", cAlternateFileName="")) returned 1 [0028.466] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x120) returned 0x552e90 [0028.466] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x30) returned 0x548070 [0028.467] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8) returned 0x547bb0 [0028.467] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8) returned 0x547ad0 [0028.467] AreFileApisANSI () returned 1 [0028.467] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x548070, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 44 [0028.467] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x58) returned 0x552fb8 [0028.467] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x548070, cbMultiByte=-1, lpWideCharStr=0x552fb8, cchWideChar=44 | out: lpWideCharStr="C:\\\\Boot\\nb-NO\\@@_OpenTheBrowserTOR_@@.html") returned 44 [0028.467] CreateFileW (lpFileName="C:\\\\Boot\\nb-NO\\@@_OpenTheBrowserTOR_@@.html" (normalized: "c:\\boot\\nb-no\\@@_openthebrowsertor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x38d84c, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x64 [0028.467] GetFileType (hFile=0x64) returned 0x1 [0028.467] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552fb8 | out: hHeap=0x530000) returned 1 [0028.468] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x556c50 [0028.468] GetLastError () returned 0x0 [0028.469] AreFileApisANSI () returned 1 [0028.469] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x548358, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 49 [0028.469] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x62) returned 0x552fb8 [0028.469] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x548358, cbMultiByte=-1, lpWideCharStr=0x552fb8, cchWideChar=49 | out: lpWideCharStr="C:\\\\Boot\\nb-NO\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html") returned 49 [0028.469] CreateFileW (lpFileName="C:\\\\Boot\\nb-NO\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html" (normalized: "c:\\boot\\nb-no\\@@_îòêðûòü_â_áðàóçåðå_tor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x38d84c, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x64 [0028.471] GetFileType (hFile=0x64) returned 0x1 [0028.471] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552fb8 | out: hHeap=0x530000) returned 1 [0028.471] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x556c50 [0028.471] GetLastError () returned 0x0 [0028.472] FindFirstFileA (in: lpFileName="C:\\\\Boot\\nb-NO\\*", lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x649cb8a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x649cb8a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x71000273, dwReserved1=0xf9, cFileName=".", cAlternateFileName="")) returned 0x547ad0 [0028.472] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x649cb8a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x649cb8a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x71000273, dwReserved1=0xf9, cFileName="..", cAlternateFileName="")) returned 1 [0028.472] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x649a5740, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x649a5740, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x649cb8a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x71000273, dwReserved1=0xf9, cFileName="@@_OpenTheBrowserTOR_@@.html", cAlternateFileName="@@_OPE~1.HTM")) returned 1 [0028.472] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x30) returned 0x548070 [0028.472] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x30) returned 0x557c58 [0028.472] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x557c58 | out: hHeap=0x530000) returned 1 [0028.472] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20) returned 0x549548 [0028.472] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x549548 | out: hHeap=0x530000) returned 1 [0028.472] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548070 | out: hHeap=0x530000) returned 1 [0028.472] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x649cb8a0, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x649cb8a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x649cb8a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x530000, dwReserved1=0x557c50, cFileName="@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html", cAlternateFileName="@@____~1.HTM")) returned 1 [0028.472] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x40) returned 0x548358 [0028.472] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x40) returned 0x5483e8 [0028.472] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5483e8 | out: hHeap=0x530000) returned 1 [0028.472] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x30) returned 0x548070 [0028.472] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548070 | out: hHeap=0x530000) returned 1 [0028.473] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548358 | out: hHeap=0x530000) returned 1 [0028.473] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea212efb, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15850, dwReserved0=0x38d9d4, dwReserved1=0x77163c74, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0028.473] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20) returned 0x549548 [0028.473] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20) returned 0x549570 [0028.473] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x549570 | out: hHeap=0x530000) returned 1 [0028.473] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x549548 | out: hHeap=0x530000) returned 1 [0028.473] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea212efb, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15850, dwReserved0=0x38d9d4, dwReserved1=0x77163c74, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0028.473] FindClose (in: hFindFile=0x547ad0 | out: hFindFile=0x547ad0) returned 1 [0028.473] FindNextFileA (in: hFindFile=0x547a90, lpFindFileData=0x38e4b0 | out: lpFindFileData=0x38e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffffffe, dwReserved1=0x7716387a, cFileName="nl-NL", cAlternateFileName="")) returned 1 [0028.473] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x120) returned 0x552e90 [0028.473] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x30) returned 0x548070 [0028.473] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8) returned 0x547bb0 [0028.473] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8) returned 0x547ad0 [0028.473] AreFileApisANSI () returned 1 [0028.473] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x548070, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 44 [0028.473] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x58) returned 0x552fb8 [0028.473] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x548070, cbMultiByte=-1, lpWideCharStr=0x552fb8, cchWideChar=44 | out: lpWideCharStr="C:\\\\Boot\\nl-NL\\@@_OpenTheBrowserTOR_@@.html") returned 44 [0028.473] CreateFileW (lpFileName="C:\\\\Boot\\nl-NL\\@@_OpenTheBrowserTOR_@@.html" (normalized: "c:\\boot\\nl-nl\\@@_openthebrowsertor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x38d84c, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x64 [0028.475] GetFileType (hFile=0x64) returned 0x1 [0028.475] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552fb8 | out: hHeap=0x530000) returned 1 [0028.475] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x556c50 [0028.475] GetLastError () returned 0x0 [0028.476] AreFileApisANSI () returned 1 [0028.476] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x548358, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 49 [0028.476] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x62) returned 0x552fb8 [0028.476] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x548358, cbMultiByte=-1, lpWideCharStr=0x552fb8, cchWideChar=49 | out: lpWideCharStr="C:\\\\Boot\\nl-NL\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html") returned 49 [0028.476] CreateFileW (lpFileName="C:\\\\Boot\\nl-NL\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html" (normalized: "c:\\boot\\nl-nl\\@@_îòêðûòü_â_áðàóçåðå_tor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x38d84c, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x64 [0028.478] GetFileType (hFile=0x64) returned 0x1 [0028.478] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552fb8 | out: hHeap=0x530000) returned 1 [0028.478] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x556c50 [0028.478] GetLastError () returned 0x0 [0028.479] FindFirstFileA (in: lpFileName="C:\\\\Boot\\nl-NL\\*", lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x649cb8a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x649cb8a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x71000273, dwReserved1=0xf9, cFileName=".", cAlternateFileName="")) returned 0x547ad0 [0028.479] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x649cb8a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x649cb8a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x71000273, dwReserved1=0xf9, cFileName="..", cAlternateFileName="")) returned 1 [0028.479] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x649cb8a0, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x649cb8a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x649cb8a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x71000273, dwReserved1=0xf9, cFileName="@@_OpenTheBrowserTOR_@@.html", cAlternateFileName="@@_OPE~1.HTM")) returned 1 [0028.479] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x30) returned 0x548070 [0028.479] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x30) returned 0x557c58 [0028.479] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x557c58 | out: hHeap=0x530000) returned 1 [0028.479] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20) returned 0x549548 [0028.479] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x549548 | out: hHeap=0x530000) returned 1 [0028.480] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548070 | out: hHeap=0x530000) returned 1 [0028.480] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x649cb8a0, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x649cb8a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x649cb8a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x530000, dwReserved1=0x557c50, cFileName="@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html", cAlternateFileName="@@____~1.HTM")) returned 1 [0028.480] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x40) returned 0x548358 [0028.480] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84c457e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x38d9d4, dwReserved1=0x77163c74, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0028.480] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84c457e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x38d9d4, dwReserved1=0x77163c74, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0028.480] FindClose (in: hFindFile=0x547ad0 | out: hFindFile=0x547ad0) returned 1 [0028.480] FindNextFileA (in: hFindFile=0x547a90, lpFindFileData=0x38e4b0 | out: lpFindFileData=0x38e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffffffe, dwReserved1=0x7716387a, cFileName="pl-PL", cAlternateFileName="")) returned 1 [0028.480] AreFileApisANSI () returned 1 [0028.480] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x548070, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 44 [0028.480] CreateFileW (lpFileName="C:\\\\Boot\\pl-PL\\@@_OpenTheBrowserTOR_@@.html" (normalized: "c:\\boot\\pl-pl\\@@_openthebrowsertor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x38d84c, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x64 [0028.481] GetFileType (hFile=0x64) returned 0x1 [0028.481] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552fb8 | out: hHeap=0x530000) returned 1 [0028.482] AreFileApisANSI () returned 1 [0028.482] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x548358, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 49 [0028.482] CreateFileW (lpFileName="C:\\\\Boot\\pl-PL\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html" (normalized: "c:\\boot\\pl-pl\\@@_îòêðûòü_â_áðàóçåðå_tor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x38d84c, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x64 [0028.484] GetFileType (hFile=0x64) returned 0x1 [0028.484] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552fb8 | out: hHeap=0x530000) returned 1 [0028.485] FindFirstFileA (in: lpFileName="C:\\\\Boot\\pl-PL\\*", lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x649cb8a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x649cb8a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x71000273, dwReserved1=0xf9, cFileName=".", cAlternateFileName="")) returned 0x547ad0 [0028.485] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x649cb8a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x649cb8a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x71000273, dwReserved1=0xf9, cFileName="..", cAlternateFileName="")) returned 1 [0028.485] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x649cb8a0, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x649cb8a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x649cb8a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x71000273, dwReserved1=0xf9, cFileName="@@_OpenTheBrowserTOR_@@.html", cAlternateFileName="@@_OPE~1.HTM")) returned 1 [0028.486] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x649cb8a0, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x649cb8a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x649f1a00, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x530000, dwReserved1=0x557c50, cFileName="@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html", cAlternateFileName="@@____~1.HTM")) returned 1 [0028.486] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e5ad4a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x38d9d4, dwReserved1=0x77163c74, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0028.486] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e5ad4a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x38d9d4, dwReserved1=0x77163c74, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0028.486] FindClose (in: hFindFile=0x547ad0 | out: hFindFile=0x547ad0) returned 1 [0028.486] FindNextFileA (in: hFindFile=0x547a90, lpFindFileData=0x38e4b0 | out: lpFindFileData=0x38e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffffffe, dwReserved1=0x7716387a, cFileName="pt-BR", cAlternateFileName="")) returned 1 [0028.486] AreFileApisANSI () returned 1 [0028.486] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x548070, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 44 [0028.486] CreateFileW (lpFileName="C:\\\\Boot\\pt-BR\\@@_OpenTheBrowserTOR_@@.html" (normalized: "c:\\boot\\pt-br\\@@_openthebrowsertor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x38d84c, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x64 [0028.519] GetFileType (hFile=0x64) returned 0x1 [0028.519] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552fb8 | out: hHeap=0x530000) returned 1 [0028.520] AreFileApisANSI () returned 1 [0028.520] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x548358, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 49 [0028.520] CreateFileW (lpFileName="C:\\\\Boot\\pt-BR\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html" (normalized: "c:\\boot\\pt-br\\@@_îòêðûòü_â_áðàóçåðå_tor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x38d84c, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x64 [0028.522] GetFileType (hFile=0x64) returned 0x1 [0028.522] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552fb8 | out: hHeap=0x530000) returned 1 [0028.523] FindFirstFileA (in: lpFileName="C:\\\\Boot\\pt-BR\\*", lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x64a3dcc0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x64a3dcc0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x71000273, dwReserved1=0xf9, cFileName=".", cAlternateFileName="")) returned 0x547ad0 [0028.524] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x64a3dcc0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x64a3dcc0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x71000273, dwReserved1=0xf9, cFileName="..", cAlternateFileName="")) returned 1 [0028.524] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64a3dcc0, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x64a3dcc0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x64a3dcc0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x71000273, dwReserved1=0xf9, cFileName="@@_OpenTheBrowserTOR_@@.html", cAlternateFileName="@@_OPE~1.HTM")) returned 1 [0028.524] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64a3dcc0, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x64a3dcc0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x64a3dcc0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x530000, dwReserved1=0x557c50, cFileName="@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html", cAlternateFileName="@@____~1.HTM")) returned 1 [0028.524] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83b9c0f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16040, dwReserved0=0x38d9d4, dwReserved1=0x77163c74, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0028.524] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83b9c0f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16040, dwReserved0=0x38d9d4, dwReserved1=0x77163c74, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0028.524] FindClose (in: hFindFile=0x547ad0 | out: hFindFile=0x547ad0) returned 1 [0028.524] FindNextFileA (in: hFindFile=0x547a90, lpFindFileData=0x38e4b0 | out: lpFindFileData=0x38e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffffffe, dwReserved1=0x7716387a, cFileName="pt-PT", cAlternateFileName="")) returned 1 [0028.524] AreFileApisANSI () returned 1 [0028.524] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x548070, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 44 [0028.524] CreateFileW (lpFileName="C:\\\\Boot\\pt-PT\\@@_OpenTheBrowserTOR_@@.html" (normalized: "c:\\boot\\pt-pt\\@@_openthebrowsertor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x38d84c, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x64 [0028.525] GetFileType (hFile=0x64) returned 0x1 [0028.525] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552fb8 | out: hHeap=0x530000) returned 1 [0028.526] AreFileApisANSI () returned 1 [0028.526] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x548358, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 49 [0028.526] CreateFileW (lpFileName="C:\\\\Boot\\pt-PT\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html" (normalized: "c:\\boot\\pt-pt\\@@_îòêðûòü_â_áðàóçåðå_tor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x38d84c, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x64 [0028.528] GetFileType (hFile=0x64) returned 0x1 [0028.528] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552fb8 | out: hHeap=0x530000) returned 1 [0028.530] FindFirstFileA (in: lpFileName="C:\\\\Boot\\pt-PT\\*", lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x64a3dcc0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x64a3dcc0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x71000273, dwReserved1=0xf9, cFileName=".", cAlternateFileName="")) returned 0x547ad0 [0028.530] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x64a3dcc0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x64a3dcc0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x71000273, dwReserved1=0xf9, cFileName="..", cAlternateFileName="")) returned 1 [0028.530] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64a3dcc0, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x64a3dcc0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x64a3dcc0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x71000273, dwReserved1=0xf9, cFileName="@@_OpenTheBrowserTOR_@@.html", cAlternateFileName="@@_OPE~1.HTM")) returned 1 [0028.530] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64a3dcc0, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x64a3dcc0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x64a3dcc0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x530000, dwReserved1=0x557c50, cFileName="@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html", cAlternateFileName="@@____~1.HTM")) returned 1 [0028.530] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe823ce95, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15e40, dwReserved0=0x38d9d4, dwReserved1=0x77163c74, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0028.530] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe823ce95, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15e40, dwReserved0=0x38d9d4, dwReserved1=0x77163c74, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0028.530] FindClose (in: hFindFile=0x547ad0 | out: hFindFile=0x547ad0) returned 1 [0028.530] FindNextFileA (in: hFindFile=0x547a90, lpFindFileData=0x38e4b0 | out: lpFindFileData=0x38e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffffffe, dwReserved1=0x7716387a, cFileName="ru-RU", cAlternateFileName="")) returned 1 [0028.530] AreFileApisANSI () returned 1 [0028.531] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x548070, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 44 [0028.531] CreateFileW (lpFileName="C:\\\\Boot\\ru-RU\\@@_OpenTheBrowserTOR_@@.html" (normalized: "c:\\boot\\ru-ru\\@@_openthebrowsertor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x38d84c, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x64 [0028.532] GetFileType (hFile=0x64) returned 0x1 [0028.532] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552fb8 | out: hHeap=0x530000) returned 1 [0028.533] AreFileApisANSI () returned 1 [0028.533] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x548358, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 49 [0028.534] CreateFileW (lpFileName="C:\\\\Boot\\ru-RU\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html" (normalized: "c:\\boot\\ru-ru\\@@_îòêðûòü_â_áðàóçåðå_tor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x38d84c, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x64 [0028.535] GetFileType (hFile=0x64) returned 0x1 [0028.535] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552fb8 | out: hHeap=0x530000) returned 1 [0028.536] FindFirstFileA (in: lpFileName="C:\\\\Boot\\ru-RU\\*", lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x64a63e20, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x64a63e20, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x71000273, dwReserved1=0xf9, cFileName=".", cAlternateFileName="")) returned 0x547ad0 [0028.537] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x64a63e20, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x64a63e20, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x71000273, dwReserved1=0xf9, cFileName="..", cAlternateFileName="")) returned 1 [0028.537] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64a63e20, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x64a63e20, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x64a63e20, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x71000273, dwReserved1=0xf9, cFileName="@@_OpenTheBrowserTOR_@@.html", cAlternateFileName="@@_OPE~1.HTM")) returned 1 [0028.537] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64a63e20, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x64a63e20, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x64a63e20, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x530000, dwReserved1=0x557c50, cFileName="@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html", cAlternateFileName="@@____~1.HTM")) returned 1 [0028.537] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x38d9d4, dwReserved1=0x77163c74, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0028.537] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x38d9d4, dwReserved1=0x77163c74, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0028.537] FindClose (in: hFindFile=0x547ad0 | out: hFindFile=0x547ad0) returned 1 [0028.537] FindNextFileA (in: hFindFile=0x547a90, lpFindFileData=0x38e4b0 | out: lpFindFileData=0x38e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffffffe, dwReserved1=0x7716387a, cFileName="sv-SE", cAlternateFileName="")) returned 1 [0028.537] AreFileApisANSI () returned 1 [0028.537] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x548070, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 44 [0028.537] CreateFileW (lpFileName="C:\\\\Boot\\sv-SE\\@@_OpenTheBrowserTOR_@@.html" (normalized: "c:\\boot\\sv-se\\@@_openthebrowsertor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x38d84c, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x64 [0028.538] GetFileType (hFile=0x64) returned 0x1 [0028.538] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552fb8 | out: hHeap=0x530000) returned 1 [0028.539] AreFileApisANSI () returned 1 [0028.539] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x548358, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 49 [0028.539] CreateFileW (lpFileName="C:\\\\Boot\\sv-SE\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html" (normalized: "c:\\boot\\sv-se\\@@_îòêðûòü_â_áðàóçåðå_tor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x38d84c, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x64 [0028.541] GetFileType (hFile=0x64) returned 0x1 [0028.541] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552fb8 | out: hHeap=0x530000) returned 1 [0028.542] FindFirstFileA (in: lpFileName="C:\\\\Boot\\sv-SE\\*", lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x64a63e20, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x64a63e20, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x71000273, dwReserved1=0xf9, cFileName=".", cAlternateFileName="")) returned 0x547ad0 [0028.543] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x64a63e20, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x64a63e20, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x71000273, dwReserved1=0xf9, cFileName="..", cAlternateFileName="")) returned 1 [0028.543] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64a63e20, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x64a63e20, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x64a63e20, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x71000273, dwReserved1=0xf9, cFileName="@@_OpenTheBrowserTOR_@@.html", cAlternateFileName="@@_OPE~1.HTM")) returned 1 [0028.543] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64a63e20, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x64a63e20, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x64a63e20, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x530000, dwReserved1=0x557c50, cFileName="@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html", cAlternateFileName="@@____~1.HTM")) returned 1 [0028.543] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x38d9d4, dwReserved1=0x77163c74, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0028.543] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x38d9d4, dwReserved1=0x77163c74, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0028.543] FindClose (in: hFindFile=0x547ad0 | out: hFindFile=0x547ad0) returned 1 [0028.543] FindNextFileA (in: hFindFile=0x547a90, lpFindFileData=0x38e4b0 | out: lpFindFileData=0x38e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffffffe, dwReserved1=0x7716387a, cFileName="tr-TR", cAlternateFileName="")) returned 1 [0028.543] AreFileApisANSI () returned 1 [0028.543] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x548070, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 44 [0028.543] CreateFileW (lpFileName="C:\\\\Boot\\tr-TR\\@@_OpenTheBrowserTOR_@@.html" (normalized: "c:\\boot\\tr-tr\\@@_openthebrowsertor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x38d84c, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x64 [0028.545] GetFileType (hFile=0x64) returned 0x1 [0028.545] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552fb8 | out: hHeap=0x530000) returned 1 [0028.547] AreFileApisANSI () returned 1 [0028.547] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x548358, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 49 [0028.547] CreateFileW (lpFileName="C:\\\\Boot\\tr-TR\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html" (normalized: "c:\\boot\\tr-tr\\@@_îòêðûòü_â_áðàóçåðå_tor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x38d84c, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x64 [0028.549] GetFileType (hFile=0x64) returned 0x1 [0028.549] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552fb8 | out: hHeap=0x530000) returned 1 [0028.551] FindFirstFileA (in: lpFileName="C:\\\\Boot\\tr-TR\\*", lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x64a89f80, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x64a89f80, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x71000273, dwReserved1=0xf9, cFileName=".", cAlternateFileName="")) returned 0x547ad0 [0028.554] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x64a89f80, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x64a89f80, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x71000273, dwReserved1=0xf9, cFileName="..", cAlternateFileName="")) returned 1 [0028.554] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64a63e20, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x64a63e20, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x64a89f80, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x71000273, dwReserved1=0xf9, cFileName="@@_OpenTheBrowserTOR_@@.html", cAlternateFileName="@@_OPE~1.HTM")) returned 1 [0028.554] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64a89f80, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x64a89f80, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x64a89f80, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x530000, dwReserved1=0x557c50, cFileName="@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html", cAlternateFileName="@@____~1.HTM")) returned 1 [0028.554] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8393ab6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15440, dwReserved0=0x38d9d4, dwReserved1=0x77163c74, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0028.554] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8393ab6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15440, dwReserved0=0x38d9d4, dwReserved1=0x77163c74, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0028.554] FindClose (in: hFindFile=0x547ad0 | out: hFindFile=0x547ad0) returned 1 [0028.555] FindNextFileA (in: hFindFile=0x547a90, lpFindFileData=0x38e4b0 | out: lpFindFileData=0x38e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffffffe, dwReserved1=0x7716387a, cFileName="zh-CN", cAlternateFileName="")) returned 1 [0028.555] AreFileApisANSI () returned 1 [0028.555] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x548070, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 44 [0028.555] CreateFileW (lpFileName="C:\\\\Boot\\zh-CN\\@@_OpenTheBrowserTOR_@@.html" (normalized: "c:\\boot\\zh-cn\\@@_openthebrowsertor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x38d84c, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x64 [0028.556] GetFileType (hFile=0x64) returned 0x1 [0028.556] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552fb8 | out: hHeap=0x530000) returned 1 [0028.557] AreFileApisANSI () returned 1 [0028.557] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x548358, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 49 [0028.557] CreateFileW (lpFileName="C:\\\\Boot\\zh-CN\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html" (normalized: "c:\\boot\\zh-cn\\@@_îòêðûòü_â_áðàóçåðå_tor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x38d84c, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x64 [0028.559] GetFileType (hFile=0x64) returned 0x1 [0028.560] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552fb8 | out: hHeap=0x530000) returned 1 [0028.561] FindFirstFileA (in: lpFileName="C:\\\\Boot\\zh-CN\\*", lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x64a89f80, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x64a89f80, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x71000273, dwReserved1=0xf9, cFileName=".", cAlternateFileName="")) returned 0x547ad0 [0028.561] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x64a89f80, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x64a89f80, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x71000273, dwReserved1=0xf9, cFileName="..", cAlternateFileName="")) returned 1 [0028.561] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64a89f80, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x64a89f80, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x64a89f80, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x71000273, dwReserved1=0xf9, cFileName="@@_OpenTheBrowserTOR_@@.html", cAlternateFileName="@@_OPE~1.HTM")) returned 1 [0028.562] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64a89f80, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x64a89f80, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x64a89f80, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x530000, dwReserved1=0x557c50, cFileName="@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html", cAlternateFileName="@@____~1.HTM")) returned 1 [0028.562] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8725b0e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11440, dwReserved0=0x38d9d4, dwReserved1=0x77163c74, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0028.562] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8725b0e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11440, dwReserved0=0x38d9d4, dwReserved1=0x77163c74, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0028.562] FindClose (in: hFindFile=0x547ad0 | out: hFindFile=0x547ad0) returned 1 [0028.562] FindNextFileA (in: hFindFile=0x547a90, lpFindFileData=0x38e4b0 | out: lpFindFileData=0x38e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffffffe, dwReserved1=0x7716387a, cFileName="zh-HK", cAlternateFileName="")) returned 1 [0028.562] AreFileApisANSI () returned 1 [0028.562] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x548070, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 44 [0028.562] CreateFileW (lpFileName="C:\\\\Boot\\zh-HK\\@@_OpenTheBrowserTOR_@@.html" (normalized: "c:\\boot\\zh-hk\\@@_openthebrowsertor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x38d84c, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x64 [0028.564] GetFileType (hFile=0x64) returned 0x1 [0028.564] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552fb8 | out: hHeap=0x530000) returned 1 [0028.565] AreFileApisANSI () returned 1 [0028.565] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x548358, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 49 [0028.565] CreateFileW (lpFileName="C:\\\\Boot\\zh-HK\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html" (normalized: "c:\\boot\\zh-hk\\@@_îòêðûòü_â_áðàóçåðå_tor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x38d84c, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x64 [0028.567] GetFileType (hFile=0x64) returned 0x1 [0028.568] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552fb8 | out: hHeap=0x530000) returned 1 [0028.569] FindFirstFileA (in: lpFileName="C:\\\\Boot\\zh-HK\\*", lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x64ab00e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x64ab00e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x71000273, dwReserved1=0xf9, cFileName=".", cAlternateFileName="")) returned 0x547ad0 [0028.569] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x64ab00e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x64ab00e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x71000273, dwReserved1=0xf9, cFileName="..", cAlternateFileName="")) returned 1 [0028.569] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64ab00e0, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x64ab00e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x64ab00e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x71000273, dwReserved1=0xf9, cFileName="@@_OpenTheBrowserTOR_@@.html", cAlternateFileName="@@_OPE~1.HTM")) returned 1 [0028.569] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64ab00e0, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x64ab00e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x64ab00e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x530000, dwReserved1=0x557c50, cFileName="@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html", cAlternateFileName="@@____~1.HTM")) returned 1 [0028.569] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11250, dwReserved0=0x38d9d4, dwReserved1=0x77163c74, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0028.569] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11250, dwReserved0=0x38d9d4, dwReserved1=0x77163c74, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0028.569] FindClose (in: hFindFile=0x547ad0 | out: hFindFile=0x547ad0) returned 1 [0028.569] FindNextFileA (in: hFindFile=0x547a90, lpFindFileData=0x38e4b0 | out: lpFindFileData=0x38e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffffffe, dwReserved1=0x7716387a, cFileName="zh-TW", cAlternateFileName="")) returned 1 [0028.569] AreFileApisANSI () returned 1 [0028.569] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x548070, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 44 [0028.569] CreateFileW (lpFileName="C:\\\\Boot\\zh-TW\\@@_OpenTheBrowserTOR_@@.html" (normalized: "c:\\boot\\zh-tw\\@@_openthebrowsertor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x38d84c, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x64 [0028.570] GetFileType (hFile=0x64) returned 0x1 [0028.570] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552fb8 | out: hHeap=0x530000) returned 1 [0028.571] AreFileApisANSI () returned 1 [0028.571] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x548358, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 49 [0028.571] CreateFileW (lpFileName="C:\\\\Boot\\zh-TW\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html" (normalized: "c:\\boot\\zh-tw\\@@_îòêðûòü_â_áðàóçåðå_tor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x38d84c, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x64 [0028.573] GetFileType (hFile=0x64) returned 0x1 [0028.573] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552fb8 | out: hHeap=0x530000) returned 1 [0028.574] FindFirstFileA (in: lpFileName="C:\\\\Boot\\zh-TW\\*", lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x64ab00e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x64ab00e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x71000273, dwReserved1=0xf9, cFileName=".", cAlternateFileName="")) returned 0x547ad0 [0028.574] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x64ab00e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x64ab00e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x71000273, dwReserved1=0xf9, cFileName="..", cAlternateFileName="")) returned 1 [0028.574] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64ab00e0, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x64ab00e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x64ab00e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x71000273, dwReserved1=0xf9, cFileName="@@_OpenTheBrowserTOR_@@.html", cAlternateFileName="@@_OPE~1.HTM")) returned 1 [0028.574] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64ab00e0, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x64ab00e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x64ab00e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x530000, dwReserved1=0x557c50, cFileName="@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html", cAlternateFileName="@@____~1.HTM")) returned 1 [0028.574] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83216ab, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11240, dwReserved0=0x38d9d4, dwReserved1=0x77163c74, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0028.574] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83216ab, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11240, dwReserved0=0x38d9d4, dwReserved1=0x77163c74, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0028.574] FindClose (in: hFindFile=0x547ad0 | out: hFindFile=0x547ad0) returned 1 [0028.575] FindNextFileA (in: hFindFile=0x547a90, lpFindFileData=0x38e4b0 | out: lpFindFileData=0x38e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffffffe, dwReserved1=0x7716387a, cFileName="zh-TW", cAlternateFileName="")) returned 0 [0028.575] FindClose (in: hFindFile=0x547a90 | out: hFindFile=0x547a90) returned 1 [0028.575] FindNextFileA (in: hFindFile=0x547a50, lpFindFileData=0x38ee14 | out: lpFindFileData=0x38ee14*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x84a3bb2c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5db2a, dwReserved0=0x38ec9c, dwReserved1=0x77163c74, cFileName="bootmgr", cAlternateFileName="")) returned 1 [0028.575] FindNextFileA (in: hFindFile=0x547a50, lpFindFileData=0x38ee14 | out: lpFindFileData=0x38ee14*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xac54a060, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac54a060, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac54a060, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x38ec9c, dwReserved1=0x77163c74, cFileName="BOOTSECT.BAK", cAlternateFileName="")) returned 1 [0028.575] AreFileApisANSI () returned 1 [0028.575] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38f354, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 17 [0028.575] CreateFileW (lpFileName="C:\\\\BOOTSECT.BAK" (normalized: "c:\\bootsect.bak"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x38eac8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0028.576] GetLastError () returned 0x5 [0028.576] GetLastError () returned 0x5 [0028.576] FindNextFileA (in: hFindFile=0x547a50, lpFindFileData=0x38ee14 | out: lpFindFileData=0x38ee14*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc182c7c0, ftLastAccessTime.dwHighDateTime=0x1d3373b, ftLastWriteTime.dwLowDateTime=0xc182c7c0, ftLastWriteTime.dwHighDateTime=0x1d3373b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffffffe, dwReserved1=0x7716387a, cFileName="Config.Msi", cAlternateFileName="")) returned 1 [0028.576] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x120) returned 0x552e90 [0028.576] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x30) returned 0x548070 [0028.576] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8) returned 0x547bb0 [0028.576] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8) returned 0x547a90 [0028.576] AreFileApisANSI () returned 1 [0028.576] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x548070, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 44 [0028.576] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x58) returned 0x547aa0 [0028.576] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x548070, cbMultiByte=-1, lpWideCharStr=0x547aa0, cchWideChar=44 | out: lpWideCharStr="C:\\\\Config.Msi\\@@_OpenTheBrowserTOR_@@.html") returned 44 [0028.576] CreateFileW (lpFileName="C:\\\\Config.Msi\\@@_OpenTheBrowserTOR_@@.html" (normalized: "c:\\config.msi\\@@_openthebrowsertor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x38e1b0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60 [0028.577] GetFileType (hFile=0x60) returned 0x1 [0028.577] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547aa0 | out: hHeap=0x530000) returned 1 [0028.578] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x555c48 [0028.578] GetLastError () returned 0x0 [0028.578] AreFileApisANSI () returned 1 [0028.579] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x548358, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 49 [0028.579] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x62) returned 0x547a90 [0028.579] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x548358, cbMultiByte=-1, lpWideCharStr=0x547a90, cchWideChar=49 | out: lpWideCharStr="C:\\\\Config.Msi\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html") returned 49 [0028.579] CreateFileW (lpFileName="C:\\\\Config.Msi\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html" (normalized: "c:\\config.msi\\@@_îòêðûòü_â_áðàóçåðå_tor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x38e1b0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60 [0028.579] GetFileType (hFile=0x60) returned 0x1 [0028.579] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0028.579] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x555c48 [0028.579] GetLastError () returned 0x0 [0028.580] FindFirstFileA (in: lpFileName="C:\\\\Config.Msi\\*", lpFindFileData=0x38e4b0 | out: lpFindFileData=0x38e4b0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x64ad6240, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x64ad6240, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x70000474, dwReserved1=0xf9, cFileName=".", cAlternateFileName="")) returned 0x547a90 [0028.580] FindNextFileA (in: hFindFile=0x547a90, lpFindFileData=0x38e4b0 | out: lpFindFileData=0x38e4b0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x64ad6240, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x64ad6240, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x70000474, dwReserved1=0xf9, cFileName="..", cAlternateFileName="")) returned 1 [0028.580] FindNextFileA (in: hFindFile=0x547a90, lpFindFileData=0x38e4b0 | out: lpFindFileData=0x38e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64ab00e0, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x64ab00e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x64ad6240, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x70000474, dwReserved1=0xf9, cFileName="@@_OpenTheBrowserTOR_@@.html", cAlternateFileName="@@_OPE~1.HTM")) returned 1 [0028.580] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x30) returned 0x548070 [0028.580] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x30) returned 0x547ad0 [0028.580] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547ad0 | out: hHeap=0x530000) returned 1 [0028.580] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20) returned 0x549548 [0028.580] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x549548 | out: hHeap=0x530000) returned 1 [0028.580] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548070 | out: hHeap=0x530000) returned 1 [0028.580] FindNextFileA (in: hFindFile=0x547a90, lpFindFileData=0x38e4b0 | out: lpFindFileData=0x38e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64ad6240, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x64ad6240, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x64ad6240, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x530000, dwReserved1=0x547ac8, cFileName="@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html", cAlternateFileName="@@____~1.HTM")) returned 1 [0028.580] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x40) returned 0x548358 [0028.581] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x40) returned 0x5483e8 [0028.581] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5483e8 | out: hHeap=0x530000) returned 1 [0028.581] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x30) returned 0x548070 [0028.581] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548070 | out: hHeap=0x530000) returned 1 [0028.581] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548358 | out: hHeap=0x530000) returned 1 [0028.581] FindNextFileA (in: hFindFile=0x547a90, lpFindFileData=0x38e4b0 | out: lpFindFileData=0x38e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64ad6240, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x64ad6240, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x64ad6240, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x530000, dwReserved1=0x547ac8, cFileName="@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html", cAlternateFileName="@@____~1.HTM")) returned 0 [0028.581] FindClose (in: hFindFile=0x547a90 | out: hFindFile=0x547a90) returned 1 [0028.581] FindNextFileA (in: hFindFile=0x547a50, lpFindFileData=0x38ee14 | out: lpFindFileData=0x38ee14*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x7716387a, cFileName="Documents and Settings", cAlternateFileName="DOCUME~1")) returned 1 [0028.581] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20) returned 0x549548 [0028.581] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20) returned 0x549570 [0028.581] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20) returned 0x549598 [0028.581] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x549570 | out: hHeap=0x530000) returned 1 [0028.581] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x549598 | out: hHeap=0x530000) returned 1 [0028.581] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x549548 | out: hHeap=0x530000) returned 1 [0028.581] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20) returned 0x549548 [0028.581] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x120) returned 0x552e90 [0028.581] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20) returned 0x549598 [0028.581] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x40) returned 0x548358 [0028.581] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x549598 | out: hHeap=0x530000) returned 1 [0028.581] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8) returned 0x547bb0 [0028.581] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8) returned 0x548070 [0028.581] AreFileApisANSI () returned 1 [0028.581] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x548358, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 56 [0028.581] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x70) returned 0x547a90 [0028.581] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x548358, cbMultiByte=-1, lpWideCharStr=0x547a90, cchWideChar=56 | out: lpWideCharStr="C:\\\\Documents and Settings\\@@_OpenTheBrowserTOR_@@.html") returned 56 [0028.581] CreateFileW (lpFileName="C:\\\\Documents and Settings\\@@_OpenTheBrowserTOR_@@.html" (normalized: "c:\\documents and settings\\@@_openthebrowsertor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x38e1b0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60 [0028.583] GetFileType (hFile=0x60) returned 0x1 [0028.583] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0028.583] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x555c48 [0028.583] GetLastError () returned 0x0 [0028.584] AreFileApisANSI () returned 1 [0028.584] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x548358, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 61 [0028.584] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x7a) returned 0x552fb8 [0028.584] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x548358, cbMultiByte=-1, lpWideCharStr=0x552fb8, cchWideChar=61 | out: lpWideCharStr="C:\\\\Documents and Settings\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html") returned 61 [0028.584] CreateFileW (lpFileName="C:\\\\Documents and Settings\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html" (normalized: "c:\\documents and settings\\@@_îòêðûòü_â_áðàóçåðå_tor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x38e1b0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60 [0028.584] GetFileType (hFile=0x60) returned 0x1 [0028.584] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552fb8 | out: hHeap=0x530000) returned 1 [0028.584] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x555c48 [0028.585] GetLastError () returned 0x0 [0028.585] FindFirstFileA (in: lpFileName="C:\\\\Documents and Settings\\*", lpFindFileData=0x38e4b0 | out: lpFindFileData=0x38e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64ad6240, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x64ad6240, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x64ad6240, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x530000, dwReserved1=0x547ac8, cFileName="@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html", cAlternateFileName="@@____~1.HTM")) returned 0xffffffff [0028.586] FindNextFileA (in: hFindFile=0x547a50, lpFindFileData=0x38ee14 | out: lpFindFileData=0x38ee14*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x56257dc0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x56257dc0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x813b7be0, ftLastWriteTime.dwHighDateTime=0x1d4d5ae, nFileSizeHigh=0x0, nFileSizeLow=0x5ff9d000, dwReserved0=0xa0000003, dwReserved1=0x7716387a, cFileName="hiberfil.sys", cAlternateFileName="")) returned 1 [0028.586] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20) returned 0x549548 [0028.586] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20) returned 0x549598 [0028.586] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x549598 | out: hHeap=0x530000) returned 1 [0028.586] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x549548 | out: hHeap=0x530000) returned 1 [0028.586] FindNextFileA (in: hFindFile=0x547a50, lpFindFileData=0x38ee14 | out: lpFindFileData=0x38ee14*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe7b42810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7b42810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x7716387a, cFileName="MSOCache", cAlternateFileName="")) returned 1 [0028.586] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x120) returned 0x552e90 [0028.586] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x30) returned 0x548070 [0028.586] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8) returned 0x547bb0 [0028.586] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8) returned 0x547a90 [0028.586] AreFileApisANSI () returned 1 [0028.586] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x548070, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 42 [0028.586] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x54) returned 0x547aa0 [0028.586] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x548070, cbMultiByte=-1, lpWideCharStr=0x547aa0, cchWideChar=42 | out: lpWideCharStr="C:\\\\MSOCache\\@@_OpenTheBrowserTOR_@@.html") returned 42 [0028.586] CreateFileW (lpFileName="C:\\\\MSOCache\\@@_OpenTheBrowserTOR_@@.html" (normalized: "c:\\msocache\\@@_openthebrowsertor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x38e1b0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60 [0028.587] GetFileType (hFile=0x60) returned 0x1 [0028.587] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547aa0 | out: hHeap=0x530000) returned 1 [0028.587] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x555c48 [0028.587] GetLastError () returned 0x0 [0028.588] AreFileApisANSI () returned 1 [0028.588] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x548070, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 47 [0028.588] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x5e) returned 0x547aa0 [0028.588] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x548070, cbMultiByte=-1, lpWideCharStr=0x547aa0, cchWideChar=47 | out: lpWideCharStr="C:\\\\MSOCache\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html") returned 47 [0028.589] CreateFileW (lpFileName="C:\\\\MSOCache\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html" (normalized: "c:\\msocache\\@@_îòêðûòü_â_áðàóçåðå_tor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x38e1b0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60 [0028.590] GetFileType (hFile=0x60) returned 0x1 [0028.590] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547aa0 | out: hHeap=0x530000) returned 1 [0028.590] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x555c48 [0028.590] GetLastError () returned 0x0 [0028.591] FindFirstFileA (in: lpFileName="C:\\\\MSOCache\\*", lpFindFileData=0x38e4b0 | out: lpFindFileData=0x38e4b0*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x64ad6240, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x64ad6240, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x70000474, dwReserved1=0xf9, cFileName=".", cAlternateFileName="")) returned 0x547a90 [0028.592] FindNextFileA (in: hFindFile=0x547a90, lpFindFileData=0x38e4b0 | out: lpFindFileData=0x38e4b0*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x64ad6240, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x64ad6240, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x70000474, dwReserved1=0xf9, cFileName="..", cAlternateFileName="")) returned 1 [0028.592] FindNextFileA (in: hFindFile=0x547a90, lpFindFileData=0x38e4b0 | out: lpFindFileData=0x38e4b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64ad6240, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x64ad6240, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x64ad6240, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x70000474, dwReserved1=0xf9, cFileName="@@_OpenTheBrowserTOR_@@.html", cAlternateFileName="@@_OPE~1.HTM")) returned 1 [0028.592] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x30) returned 0x548070 [0028.592] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x30) returned 0x547ad0 [0028.592] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547ad0 | out: hHeap=0x530000) returned 1 [0028.592] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20) returned 0x549548 [0028.592] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x549548 | out: hHeap=0x530000) returned 1 [0028.592] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548070 | out: hHeap=0x530000) returned 1 [0028.592] FindNextFileA (in: hFindFile=0x547a90, lpFindFileData=0x38e4b0 | out: lpFindFileData=0x38e4b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64ad6240, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x64ad6240, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x64ad6240, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x530000, dwReserved1=0x547ac8, cFileName="@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html", cAlternateFileName="@@____~1.HTM")) returned 1 [0028.592] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x30) returned 0x548070 [0028.592] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x30) returned 0x547ad0 [0028.592] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547ad0 | out: hHeap=0x530000) returned 1 [0028.592] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x30) returned 0x547ad0 [0028.592] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547ad0 | out: hHeap=0x530000) returned 1 [0028.592] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548070 | out: hHeap=0x530000) returned 1 [0028.592] FindNextFileA (in: hFindFile=0x547a90, lpFindFileData=0x38e4b0 | out: lpFindFileData=0x38e4b0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa5cd3a40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5cd3a40, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x38e338, dwReserved1=0x77163c74, cFileName="All Users", cAlternateFileName="ALLUSE~1")) returned 1 [0028.592] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20) returned 0x549548 [0028.592] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20) returned 0x549598 [0028.592] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20) returned 0x549570 [0028.592] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x549598 | out: hHeap=0x530000) returned 1 [0028.592] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x549570 | out: hHeap=0x530000) returned 1 [0028.592] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x549548 | out: hHeap=0x530000) returned 1 [0028.592] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20) returned 0x549548 [0028.592] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x120) returned 0x552e90 [0028.592] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20) returned 0x549570 [0028.592] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x40) returned 0x548358 [0028.592] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x549570 | out: hHeap=0x530000) returned 1 [0028.592] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8) returned 0x547bb0 [0028.592] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8) returned 0x548070 [0028.593] AreFileApisANSI () returned 1 [0028.593] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x548358, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 52 [0028.593] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x68) returned 0x552fb8 [0028.593] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x548358, cbMultiByte=-1, lpWideCharStr=0x552fb8, cchWideChar=52 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\@@_OpenTheBrowserTOR_@@.html") returned 52 [0028.593] CreateFileW (lpFileName="C:\\\\MSOCache\\All Users\\@@_OpenTheBrowserTOR_@@.html" (normalized: "c:\\msocache\\all users\\@@_openthebrowsertor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x38d84c, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x64 [0028.596] GetFileType (hFile=0x64) returned 0x1 [0028.596] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552fb8 | out: hHeap=0x530000) returned 1 [0028.596] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x556c50 [0028.596] GetLastError () returned 0x0 [0028.597] AreFileApisANSI () returned 1 [0028.597] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x548358, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 57 [0028.597] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x72) returned 0x5422e8 [0028.597] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x548358, cbMultiByte=-1, lpWideCharStr=0x5422e8, cchWideChar=57 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html") returned 57 [0028.597] CreateFileW (lpFileName="C:\\\\MSOCache\\All Users\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html" (normalized: "c:\\msocache\\all users\\@@_îòêðûòü_â_áðàóçåðå_tor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x38d84c, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x64 [0028.597] GetFileType (hFile=0x64) returned 0x1 [0028.598] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5422e8 | out: hHeap=0x530000) returned 1 [0028.598] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x556c50 [0028.598] GetLastError () returned 0x0 [0028.599] FindFirstFileA (in: lpFileName="C:\\\\MSOCache\\All Users\\*", lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x64afc3a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x64afc3a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x71000273, dwReserved1=0xf9, cFileName=".", cAlternateFileName="")) returned 0x552e90 [0028.599] FindNextFileA (in: hFindFile=0x552e90, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x64afc3a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x64afc3a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x71000273, dwReserved1=0xf9, cFileName="..", cAlternateFileName="")) returned 1 [0028.599] FindNextFileA (in: hFindFile=0x552e90, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64afc3a0, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x64afc3a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x64afc3a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x71000273, dwReserved1=0xf9, cFileName="@@_OpenTheBrowserTOR_@@.html", cAlternateFileName="@@_OPE~1.HTM")) returned 1 [0028.599] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x40) returned 0x548358 [0028.599] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x40) returned 0x5483e8 [0028.600] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5483e8 | out: hHeap=0x530000) returned 1 [0028.600] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20) returned 0x549548 [0028.600] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x549548 | out: hHeap=0x530000) returned 1 [0028.600] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548358 | out: hHeap=0x530000) returned 1 [0028.600] FindNextFileA (in: hFindFile=0x552e90, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64afc3a0, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x64afc3a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x64afc3a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x71000273, dwReserved1=0xf9, cFileName="@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html", cAlternateFileName="@@____~1.HTM")) returned 1 [0028.600] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x40) returned 0x548358 [0028.600] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x40) returned 0x5483e8 [0028.600] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5483e8 | out: hHeap=0x530000) returned 1 [0028.600] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x30) returned 0x548070 [0028.600] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548070 | out: hHeap=0x530000) returned 1 [0028.600] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548358 | out: hHeap=0x530000) returned 1 [0028.600] FindNextFileA (in: hFindFile=0x552e90, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee38cbf0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x38d9d4, dwReserved1=0x77163c74, cFileName="{90140000-0016-0409-1000-0000000FF1CE}-C", cAlternateFileName="{90140~3")) returned 1 [0028.600] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x40) returned 0x548358 [0028.600] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x40) returned 0x5483e8 [0028.600] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x40) returned 0x5483a0 [0028.600] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5483e8 | out: hHeap=0x530000) returned 1 [0028.600] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5483a0 | out: hHeap=0x530000) returned 1 [0028.600] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548358 | out: hHeap=0x530000) returned 1 [0028.600] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x40) returned 0x548358 [0028.600] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x120) returned 0x557c58 [0028.600] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x50) returned 0x557d80 [0028.600] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x77) returned 0x5422e8 [0028.600] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x557d80 | out: hHeap=0x530000) returned 1 [0028.600] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8) returned 0x547bb0 [0028.600] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8) returned 0x548070 [0028.600] AreFileApisANSI () returned 1 [0028.600] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5422e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0028.600] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xba) returned 0x557d80 [0028.600] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5422e8, cbMultiByte=-1, lpWideCharStr=0x557d80, cchWideChar=93 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\@@_OpenTheBrowserTOR_@@.html") returned 93 [0028.601] CreateFileW (lpFileName="C:\\\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\@@_OpenTheBrowserTOR_@@.html" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\@@_openthebrowsertor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x38cee8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x68 [0028.603] GetFileType (hFile=0x68) returned 0x1 [0028.603] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x557d80 | out: hHeap=0x530000) returned 1 [0028.603] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x557d80 [0028.604] GetLastError () returned 0x0 [0028.604] AreFileApisANSI () returned 1 [0028.605] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5422e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 98 [0028.605] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xc4) returned 0x552ed0 [0028.605] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5422e8, cbMultiByte=-1, lpWideCharStr=0x552ed0, cchWideChar=98 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html") returned 98 [0028.605] CreateFileW (lpFileName="C:\\\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\@@_îòêðûòü_â_áðàóçåðå_tor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x38cee8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x68 [0028.605] GetFileType (hFile=0x68) returned 0x1 [0028.605] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ed0 | out: hHeap=0x530000) returned 1 [0028.605] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x557d80 [0028.605] GetLastError () returned 0x0 [0028.606] FindFirstFileA (in: lpFileName="C:\\\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x64afc3a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x64afc3a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4900044d, dwReserved1=0x472, cFileName=".", cAlternateFileName="")) returned 0x547ad0 [0028.606] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x64afc3a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x64afc3a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4900044d, dwReserved1=0x472, cFileName="..", cAlternateFileName="")) returned 1 [0028.606] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64afc3a0, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x64afc3a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x64afc3a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x4900044d, dwReserved1=0x472, cFileName="@@_OpenTheBrowserTOR_@@.html", cAlternateFileName="@@_OPE~1.HTM")) returned 1 [0028.606] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x60) returned 0x552ed0 [0028.606] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x60) returned 0x552f38 [0028.606] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552f38 | out: hHeap=0x530000) returned 1 [0028.606] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20) returned 0x549570 [0028.606] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x549570 | out: hHeap=0x530000) returned 1 [0028.606] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ed0 | out: hHeap=0x530000) returned 1 [0028.606] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64afc3a0, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x64afc3a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x64afc3a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x530000, dwReserved1=0x552f30, cFileName="@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html", cAlternateFileName="@@____~1.HTM")) returned 1 [0028.607] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x70) returned 0x552ed0 [0028.607] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x70) returned 0x552f48 [0028.607] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552f48 | out: hHeap=0x530000) returned 1 [0028.607] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x30) returned 0x548070 [0028.607] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548070 | out: hHeap=0x530000) returned 1 [0028.607] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ed0 | out: hHeap=0x530000) returned 1 [0028.607] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x393df700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x393df700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xed035930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x102fcbb, dwReserved0=0x38d070, dwReserved1=0x77163c74, cFileName="ExcelLR.cab", cAlternateFileName="")) returned 1 [0028.607] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x50) returned 0x552ed0 [0028.607] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x50) returned 0x552f28 [0028.607] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552f28 | out: hHeap=0x530000) returned 1 [0028.607] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ed0 | out: hHeap=0x530000) returned 1 [0028.607] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xece1ee80, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x263e00, dwReserved0=0x530000, dwReserved1=0x552f20, cFileName="ExcelMUI.msi", cAlternateFileName="")) returned 1 [0028.607] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x50) returned 0x552ed0 [0028.607] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x50) returned 0x552f28 [0028.607] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552f28 | out: hHeap=0x530000) returned 1 [0028.607] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ed0 | out: hHeap=0x530000) returned 1 [0028.607] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x61d, dwReserved0=0x530000, dwReserved1=0x552f20, cFileName="ExcelMUI.xml", cAlternateFileName="")) returned 1 [0028.607] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x50) returned 0x552ed0 [0028.607] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x50) returned 0x552f28 [0028.607] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552f28 | out: hHeap=0x530000) returned 1 [0028.607] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ed0 | out: hHeap=0x530000) returned 1 [0028.607] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8) returned 0x547bb0 [0028.607] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8) returned 0x548070 [0028.607] AreFileApisANSI () returned 1 [0028.607] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38d728, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 77 [0028.607] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x9a) returned 0x552ed0 [0028.607] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38d728, cbMultiByte=-1, lpWideCharStr=0x552ed0, cchWideChar=77 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml") returned 77 [0028.607] CreateFileW (lpFileName="C:\\\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x38ce9c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6c [0028.609] GetFileType (hFile=0x6c) returned 0x1 [0028.609] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ed0 | out: hHeap=0x530000) returned 1 [0028.609] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cee8 | out: lpNewFilePointer=0x0) returned 1 [0028.609] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce9c | out: lpNewFilePointer=0x0) returned 1 [0028.610] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ced0 | out: lpNewFilePointer=0x0) returned 1 [0028.610] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ceb8 | out: lpNewFilePointer=0x0) returned 1 [0028.610] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce7c | out: lpNewFilePointer=0x0) returned 1 [0028.610] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ced0 | out: lpNewFilePointer=0x0) returned 1 [0028.610] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ceb8 | out: lpNewFilePointer=0x0) returned 1 [0028.610] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce7c | out: lpNewFilePointer=0x0) returned 1 [0028.610] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x558c60 [0028.611] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x61d, lpOverlapped=0x0) returned 1 [0028.612] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf2c | out: lpNewFilePointer=0x0) returned 1 [0028.612] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cef0 | out: lpNewFilePointer=0x0) returned 1 [0028.612] GetLastError () returned 0x0 [0028.612] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ceb8 | out: lpNewFilePointer=0x0) returned 1 [0028.612] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce4c | out: lpNewFilePointer=0x0) returned 1 [0028.613] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x8, lpNewFilePointer=0x0, dwMoveMethod=0x38cec8 | out: lpNewFilePointer=0x0) returned 1 [0028.613] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce7c | out: lpNewFilePointer=0x0) returned 1 [0028.613] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x615, lpOverlapped=0x0) returned 1 [0028.613] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf2c | out: lpNewFilePointer=0x0) returned 1 [0028.613] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec0 | out: lpNewFilePointer=0x0) returned 1 [0028.613] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x8, lpNewFilePointer=0x0, dwMoveMethod=0x38cf3c | out: lpNewFilePointer=0x0) returned 1 [0028.613] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cef0 | out: lpNewFilePointer=0x0) returned 1 [0028.613] GetLastError () returned 0x0 [0028.613] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ceb8 | out: lpNewFilePointer=0x0) returned 1 [0028.614] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce4c | out: lpNewFilePointer=0x0) returned 1 [0028.614] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x10, lpNewFilePointer=0x0, dwMoveMethod=0x38cec8 | out: lpNewFilePointer=0x0) returned 1 [0028.614] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce7c | out: lpNewFilePointer=0x0) returned 1 [0028.614] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x60d, lpOverlapped=0x0) returned 1 [0028.614] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf2c | out: lpNewFilePointer=0x0) returned 1 [0028.614] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec0 | out: lpNewFilePointer=0x0) returned 1 [0028.614] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x10, lpNewFilePointer=0x0, dwMoveMethod=0x38cf3c | out: lpNewFilePointer=0x0) returned 1 [0028.614] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cef0 | out: lpNewFilePointer=0x0) returned 1 [0028.614] GetLastError () returned 0x0 [0028.614] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ceb8 | out: lpNewFilePointer=0x0) returned 1 [0028.615] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce4c | out: lpNewFilePointer=0x0) returned 1 [0028.615] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x18, lpNewFilePointer=0x0, dwMoveMethod=0x38cec8 | out: lpNewFilePointer=0x0) returned 1 [0028.615] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce7c | out: lpNewFilePointer=0x0) returned 1 [0028.615] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x605, lpOverlapped=0x0) returned 1 [0028.615] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf2c | out: lpNewFilePointer=0x0) returned 1 [0028.615] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec0 | out: lpNewFilePointer=0x0) returned 1 [0028.615] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x18, lpNewFilePointer=0x0, dwMoveMethod=0x38cf3c | out: lpNewFilePointer=0x0) returned 1 [0028.615] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cef0 | out: lpNewFilePointer=0x0) returned 1 [0028.615] GetLastError () returned 0x0 [0028.615] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ceb8 | out: lpNewFilePointer=0x0) returned 1 [0028.616] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce4c | out: lpNewFilePointer=0x0) returned 1 [0028.616] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x20, lpNewFilePointer=0x0, dwMoveMethod=0x38cec8 | out: lpNewFilePointer=0x0) returned 1 [0028.616] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce7c | out: lpNewFilePointer=0x0) returned 1 [0028.616] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x5fd, lpOverlapped=0x0) returned 1 [0028.616] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf2c | out: lpNewFilePointer=0x0) returned 1 [0028.616] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec0 | out: lpNewFilePointer=0x0) returned 1 [0028.616] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x20, lpNewFilePointer=0x0, dwMoveMethod=0x38cf3c | out: lpNewFilePointer=0x0) returned 1 [0028.616] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cef0 | out: lpNewFilePointer=0x0) returned 1 [0028.616] GetLastError () returned 0x0 [0028.616] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ceb8 | out: lpNewFilePointer=0x0) returned 1 [0028.617] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce4c | out: lpNewFilePointer=0x0) returned 1 [0028.617] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x28, lpNewFilePointer=0x0, dwMoveMethod=0x38cec8 | out: lpNewFilePointer=0x0) returned 1 [0028.617] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce7c | out: lpNewFilePointer=0x0) returned 1 [0028.617] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x5f5, lpOverlapped=0x0) returned 1 [0028.617] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf2c | out: lpNewFilePointer=0x0) returned 1 [0028.617] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec0 | out: lpNewFilePointer=0x0) returned 1 [0028.617] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x28, lpNewFilePointer=0x0, dwMoveMethod=0x38cf3c | out: lpNewFilePointer=0x0) returned 1 [0028.617] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cef0 | out: lpNewFilePointer=0x0) returned 1 [0028.617] GetLastError () returned 0x0 [0028.617] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ceb8 | out: lpNewFilePointer=0x0) returned 1 [0028.618] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce4c | out: lpNewFilePointer=0x0) returned 1 [0028.618] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x30, lpNewFilePointer=0x0, dwMoveMethod=0x38cec8 | out: lpNewFilePointer=0x0) returned 1 [0028.618] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce7c | out: lpNewFilePointer=0x0) returned 1 [0028.618] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x5ed, lpOverlapped=0x0) returned 1 [0028.618] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf2c | out: lpNewFilePointer=0x0) returned 1 [0028.618] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec0 | out: lpNewFilePointer=0x0) returned 1 [0028.618] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x30, lpNewFilePointer=0x0, dwMoveMethod=0x38cf3c | out: lpNewFilePointer=0x0) returned 1 [0028.618] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cef0 | out: lpNewFilePointer=0x0) returned 1 [0028.618] GetLastError () returned 0x0 [0028.618] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ceb8 | out: lpNewFilePointer=0x0) returned 1 [0028.619] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce4c | out: lpNewFilePointer=0x0) returned 1 [0028.619] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x38, lpNewFilePointer=0x0, dwMoveMethod=0x38cec8 | out: lpNewFilePointer=0x0) returned 1 [0028.619] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce7c | out: lpNewFilePointer=0x0) returned 1 [0028.619] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x5e5, lpOverlapped=0x0) returned 1 [0028.619] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf2c | out: lpNewFilePointer=0x0) returned 1 [0028.619] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec0 | out: lpNewFilePointer=0x0) returned 1 [0028.619] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x38, lpNewFilePointer=0x0, dwMoveMethod=0x38cf3c | out: lpNewFilePointer=0x0) returned 1 [0028.619] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cef0 | out: lpNewFilePointer=0x0) returned 1 [0028.619] GetLastError () returned 0x0 [0028.619] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ceb8 | out: lpNewFilePointer=0x0) returned 1 [0028.620] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce4c | out: lpNewFilePointer=0x0) returned 1 [0028.620] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x40, lpNewFilePointer=0x0, dwMoveMethod=0x38cec8 | out: lpNewFilePointer=0x0) returned 1 [0028.620] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce7c | out: lpNewFilePointer=0x0) returned 1 [0028.620] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x5dd, lpOverlapped=0x0) returned 1 [0028.620] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf2c | out: lpNewFilePointer=0x0) returned 1 [0028.620] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec0 | out: lpNewFilePointer=0x0) returned 1 [0028.620] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x40, lpNewFilePointer=0x0, dwMoveMethod=0x38cf3c | out: lpNewFilePointer=0x0) returned 1 [0028.620] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cef0 | out: lpNewFilePointer=0x0) returned 1 [0028.620] GetLastError () returned 0x0 [0028.621] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ceb8 | out: lpNewFilePointer=0x0) returned 1 [0028.621] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce4c | out: lpNewFilePointer=0x0) returned 1 [0028.621] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x48, lpNewFilePointer=0x0, dwMoveMethod=0x38cec8 | out: lpNewFilePointer=0x0) returned 1 [0028.621] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce7c | out: lpNewFilePointer=0x0) returned 1 [0028.621] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x5d5, lpOverlapped=0x0) returned 1 [0028.621] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf2c | out: lpNewFilePointer=0x0) returned 1 [0028.621] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec0 | out: lpNewFilePointer=0x0) returned 1 [0028.621] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x48, lpNewFilePointer=0x0, dwMoveMethod=0x38cf3c | out: lpNewFilePointer=0x0) returned 1 [0028.621] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cef0 | out: lpNewFilePointer=0x0) returned 1 [0028.621] GetLastError () returned 0x0 [0028.622] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ceb8 | out: lpNewFilePointer=0x0) returned 1 [0028.622] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce4c | out: lpNewFilePointer=0x0) returned 1 [0028.622] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x50, lpNewFilePointer=0x0, dwMoveMethod=0x38cec8 | out: lpNewFilePointer=0x0) returned 1 [0028.622] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce7c | out: lpNewFilePointer=0x0) returned 1 [0028.622] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x5cd, lpOverlapped=0x0) returned 1 [0028.622] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf2c | out: lpNewFilePointer=0x0) returned 1 [0028.622] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec0 | out: lpNewFilePointer=0x0) returned 1 [0028.622] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x50, lpNewFilePointer=0x0, dwMoveMethod=0x38cf3c | out: lpNewFilePointer=0x0) returned 1 [0028.622] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cef0 | out: lpNewFilePointer=0x0) returned 1 [0028.623] GetLastError () returned 0x0 [0028.623] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ceb8 | out: lpNewFilePointer=0x0) returned 1 [0028.623] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce4c | out: lpNewFilePointer=0x0) returned 1 [0028.623] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x58, lpNewFilePointer=0x0, dwMoveMethod=0x38cec8 | out: lpNewFilePointer=0x0) returned 1 [0028.623] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce7c | out: lpNewFilePointer=0x0) returned 1 [0028.623] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x5c5, lpOverlapped=0x0) returned 1 [0028.623] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf2c | out: lpNewFilePointer=0x0) returned 1 [0028.623] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec0 | out: lpNewFilePointer=0x0) returned 1 [0028.623] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x58, lpNewFilePointer=0x0, dwMoveMethod=0x38cf3c | out: lpNewFilePointer=0x0) returned 1 [0028.623] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cef0 | out: lpNewFilePointer=0x0) returned 1 [0028.624] GetLastError () returned 0x0 [0028.624] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ceb8 | out: lpNewFilePointer=0x0) returned 1 [0028.624] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce4c | out: lpNewFilePointer=0x0) returned 1 [0028.624] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x60, lpNewFilePointer=0x0, dwMoveMethod=0x38cec8 | out: lpNewFilePointer=0x0) returned 1 [0028.624] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce7c | out: lpNewFilePointer=0x0) returned 1 [0028.625] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x5bd, lpOverlapped=0x0) returned 1 [0028.625] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf2c | out: lpNewFilePointer=0x0) returned 1 [0028.625] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec0 | out: lpNewFilePointer=0x0) returned 1 [0028.625] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x60, lpNewFilePointer=0x0, dwMoveMethod=0x38cf3c | out: lpNewFilePointer=0x0) returned 1 [0028.625] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cef0 | out: lpNewFilePointer=0x0) returned 1 [0028.626] GetLastError () returned 0x0 [0028.626] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ceb8 | out: lpNewFilePointer=0x0) returned 1 [0028.626] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce4c | out: lpNewFilePointer=0x0) returned 1 [0028.626] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x68, lpNewFilePointer=0x0, dwMoveMethod=0x38cec8 | out: lpNewFilePointer=0x0) returned 1 [0028.626] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce7c | out: lpNewFilePointer=0x0) returned 1 [0028.626] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x5b5, lpOverlapped=0x0) returned 1 [0028.626] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf2c | out: lpNewFilePointer=0x0) returned 1 [0028.626] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec0 | out: lpNewFilePointer=0x0) returned 1 [0028.626] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x68, lpNewFilePointer=0x0, dwMoveMethod=0x38cf3c | out: lpNewFilePointer=0x0) returned 1 [0028.626] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cef0 | out: lpNewFilePointer=0x0) returned 1 [0028.627] GetLastError () returned 0x0 [0028.627] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ceb8 | out: lpNewFilePointer=0x0) returned 1 [0028.627] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce4c | out: lpNewFilePointer=0x0) returned 1 [0028.627] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x70, lpNewFilePointer=0x0, dwMoveMethod=0x38cec8 | out: lpNewFilePointer=0x0) returned 1 [0028.627] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce7c | out: lpNewFilePointer=0x0) returned 1 [0028.627] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x5ad, lpOverlapped=0x0) returned 1 [0028.627] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf2c | out: lpNewFilePointer=0x0) returned 1 [0028.627] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec0 | out: lpNewFilePointer=0x0) returned 1 [0028.627] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x70, lpNewFilePointer=0x0, dwMoveMethod=0x38cf3c | out: lpNewFilePointer=0x0) returned 1 [0028.627] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cef0 | out: lpNewFilePointer=0x0) returned 1 [0028.627] GetLastError () returned 0x0 [0028.627] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ceb8 | out: lpNewFilePointer=0x0) returned 1 [0028.628] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce4c | out: lpNewFilePointer=0x0) returned 1 [0028.628] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x78, lpNewFilePointer=0x0, dwMoveMethod=0x38cec8 | out: lpNewFilePointer=0x0) returned 1 [0028.628] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce7c | out: lpNewFilePointer=0x0) returned 1 [0028.628] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x5a5, lpOverlapped=0x0) returned 1 [0028.628] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf2c | out: lpNewFilePointer=0x0) returned 1 [0028.628] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec0 | out: lpNewFilePointer=0x0) returned 1 [0028.628] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x78, lpNewFilePointer=0x0, dwMoveMethod=0x38cf3c | out: lpNewFilePointer=0x0) returned 1 [0028.628] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cef0 | out: lpNewFilePointer=0x0) returned 1 [0028.628] GetLastError () returned 0x0 [0028.628] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ceb8 | out: lpNewFilePointer=0x0) returned 1 [0028.628] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce4c | out: lpNewFilePointer=0x0) returned 1 [0028.628] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x80, lpNewFilePointer=0x0, dwMoveMethod=0x38cec8 | out: lpNewFilePointer=0x0) returned 1 [0028.629] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce7c | out: lpNewFilePointer=0x0) returned 1 [0028.629] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x59d, lpOverlapped=0x0) returned 1 [0028.629] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf2c | out: lpNewFilePointer=0x0) returned 1 [0028.629] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec0 | out: lpNewFilePointer=0x0) returned 1 [0028.629] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x80, lpNewFilePointer=0x0, dwMoveMethod=0x38cf3c | out: lpNewFilePointer=0x0) returned 1 [0028.629] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cef0 | out: lpNewFilePointer=0x0) returned 1 [0028.629] GetLastError () returned 0x0 [0028.629] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ceb8 | out: lpNewFilePointer=0x0) returned 1 [0028.629] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce4c | out: lpNewFilePointer=0x0) returned 1 [0028.629] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x88, lpNewFilePointer=0x0, dwMoveMethod=0x38cec8 | out: lpNewFilePointer=0x0) returned 1 [0028.629] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce7c | out: lpNewFilePointer=0x0) returned 1 [0028.630] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x595, lpOverlapped=0x0) returned 1 [0028.630] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf2c | out: lpNewFilePointer=0x0) returned 1 [0028.630] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec0 | out: lpNewFilePointer=0x0) returned 1 [0028.630] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x88, lpNewFilePointer=0x0, dwMoveMethod=0x38cf3c | out: lpNewFilePointer=0x0) returned 1 [0028.630] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cef0 | out: lpNewFilePointer=0x0) returned 1 [0028.630] GetLastError () returned 0x0 [0028.630] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ceb8 | out: lpNewFilePointer=0x0) returned 1 [0028.630] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce4c | out: lpNewFilePointer=0x0) returned 1 [0028.630] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x90, lpNewFilePointer=0x0, dwMoveMethod=0x38cec8 | out: lpNewFilePointer=0x0) returned 1 [0028.630] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce7c | out: lpNewFilePointer=0x0) returned 1 [0028.630] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x58d, lpOverlapped=0x0) returned 1 [0028.631] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf2c | out: lpNewFilePointer=0x0) returned 1 [0028.631] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec0 | out: lpNewFilePointer=0x0) returned 1 [0028.631] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x90, lpNewFilePointer=0x0, dwMoveMethod=0x38cf3c | out: lpNewFilePointer=0x0) returned 1 [0028.631] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cef0 | out: lpNewFilePointer=0x0) returned 1 [0028.631] GetLastError () returned 0x0 [0028.631] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ceb8 | out: lpNewFilePointer=0x0) returned 1 [0028.631] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce4c | out: lpNewFilePointer=0x0) returned 1 [0028.631] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x98, lpNewFilePointer=0x0, dwMoveMethod=0x38cec8 | out: lpNewFilePointer=0x0) returned 1 [0028.631] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce7c | out: lpNewFilePointer=0x0) returned 1 [0028.631] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x585, lpOverlapped=0x0) returned 1 [0028.631] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf2c | out: lpNewFilePointer=0x0) returned 1 [0028.631] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec0 | out: lpNewFilePointer=0x0) returned 1 [0028.632] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x98, lpNewFilePointer=0x0, dwMoveMethod=0x38cf3c | out: lpNewFilePointer=0x0) returned 1 [0028.632] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cef0 | out: lpNewFilePointer=0x0) returned 1 [0028.632] GetLastError () returned 0x0 [0028.632] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ceb8 | out: lpNewFilePointer=0x0) returned 1 [0028.632] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce4c | out: lpNewFilePointer=0x0) returned 1 [0028.632] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0xa0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec8 | out: lpNewFilePointer=0x0) returned 1 [0028.632] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce7c | out: lpNewFilePointer=0x0) returned 1 [0028.632] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x57d, lpOverlapped=0x0) returned 1 [0028.632] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf2c | out: lpNewFilePointer=0x0) returned 1 [0028.632] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec0 | out: lpNewFilePointer=0x0) returned 1 [0028.632] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0xa0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf3c | out: lpNewFilePointer=0x0) returned 1 [0028.632] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cef0 | out: lpNewFilePointer=0x0) returned 1 [0028.633] GetLastError () returned 0x0 [0028.633] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ceb8 | out: lpNewFilePointer=0x0) returned 1 [0028.633] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce4c | out: lpNewFilePointer=0x0) returned 1 [0028.633] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0xa8, lpNewFilePointer=0x0, dwMoveMethod=0x38cec8 | out: lpNewFilePointer=0x0) returned 1 [0028.633] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce7c | out: lpNewFilePointer=0x0) returned 1 [0028.633] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x575, lpOverlapped=0x0) returned 1 [0028.633] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf2c | out: lpNewFilePointer=0x0) returned 1 [0028.633] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec0 | out: lpNewFilePointer=0x0) returned 1 [0028.633] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0xa8, lpNewFilePointer=0x0, dwMoveMethod=0x38cf3c | out: lpNewFilePointer=0x0) returned 1 [0028.633] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cef0 | out: lpNewFilePointer=0x0) returned 1 [0028.633] GetLastError () returned 0x0 [0028.634] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ceb8 | out: lpNewFilePointer=0x0) returned 1 [0028.634] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce4c | out: lpNewFilePointer=0x0) returned 1 [0028.634] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0xb0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec8 | out: lpNewFilePointer=0x0) returned 1 [0028.634] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce7c | out: lpNewFilePointer=0x0) returned 1 [0028.634] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x56d, lpOverlapped=0x0) returned 1 [0028.634] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf2c | out: lpNewFilePointer=0x0) returned 1 [0028.634] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec0 | out: lpNewFilePointer=0x0) returned 1 [0028.634] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0xb0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf3c | out: lpNewFilePointer=0x0) returned 1 [0028.634] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cef0 | out: lpNewFilePointer=0x0) returned 1 [0028.634] GetLastError () returned 0x0 [0028.634] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ceb8 | out: lpNewFilePointer=0x0) returned 1 [0028.634] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce4c | out: lpNewFilePointer=0x0) returned 1 [0028.635] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0xb8, lpNewFilePointer=0x0, dwMoveMethod=0x38cec8 | out: lpNewFilePointer=0x0) returned 1 [0028.635] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce7c | out: lpNewFilePointer=0x0) returned 1 [0028.635] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x565, lpOverlapped=0x0) returned 1 [0028.635] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf2c | out: lpNewFilePointer=0x0) returned 1 [0028.635] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec0 | out: lpNewFilePointer=0x0) returned 1 [0028.635] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0xb8, lpNewFilePointer=0x0, dwMoveMethod=0x38cf3c | out: lpNewFilePointer=0x0) returned 1 [0028.635] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cef0 | out: lpNewFilePointer=0x0) returned 1 [0028.635] GetLastError () returned 0x0 [0028.635] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ceb8 | out: lpNewFilePointer=0x0) returned 1 [0028.635] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce4c | out: lpNewFilePointer=0x0) returned 1 [0028.635] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0xc0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec8 | out: lpNewFilePointer=0x0) returned 1 [0028.635] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce7c | out: lpNewFilePointer=0x0) returned 1 [0028.636] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x55d, lpOverlapped=0x0) returned 1 [0028.636] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf2c | out: lpNewFilePointer=0x0) returned 1 [0028.636] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec0 | out: lpNewFilePointer=0x0) returned 1 [0028.636] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0xc0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf3c | out: lpNewFilePointer=0x0) returned 1 [0028.636] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cef0 | out: lpNewFilePointer=0x0) returned 1 [0028.636] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ceb8 | out: lpNewFilePointer=0x0) returned 1 [0028.636] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce4c | out: lpNewFilePointer=0x0) returned 1 [0028.636] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0xc8, lpNewFilePointer=0x0, dwMoveMethod=0x38cec8 | out: lpNewFilePointer=0x0) returned 1 [0028.636] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce7c | out: lpNewFilePointer=0x0) returned 1 [0028.636] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x555, lpOverlapped=0x0) returned 1 [0028.636] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf2c | out: lpNewFilePointer=0x0) returned 1 [0028.636] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec0 | out: lpNewFilePointer=0x0) returned 1 [0028.637] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0xc8, lpNewFilePointer=0x0, dwMoveMethod=0x38cf3c | out: lpNewFilePointer=0x0) returned 1 [0028.637] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cef0 | out: lpNewFilePointer=0x0) returned 1 [0028.637] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ceb8 | out: lpNewFilePointer=0x0) returned 1 [0028.637] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce4c | out: lpNewFilePointer=0x0) returned 1 [0028.637] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0xd0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec8 | out: lpNewFilePointer=0x0) returned 1 [0028.637] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce7c | out: lpNewFilePointer=0x0) returned 1 [0028.637] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x54d, lpOverlapped=0x0) returned 1 [0028.637] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf2c | out: lpNewFilePointer=0x0) returned 1 [0028.637] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec0 | out: lpNewFilePointer=0x0) returned 1 [0028.637] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0xd0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf3c | out: lpNewFilePointer=0x0) returned 1 [0028.637] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cef0 | out: lpNewFilePointer=0x0) returned 1 [0028.637] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ceb8 | out: lpNewFilePointer=0x0) returned 1 [0028.637] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce4c | out: lpNewFilePointer=0x0) returned 1 [0028.638] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0xd8, lpNewFilePointer=0x0, dwMoveMethod=0x38cec8 | out: lpNewFilePointer=0x0) returned 1 [0028.638] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce7c | out: lpNewFilePointer=0x0) returned 1 [0028.638] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x545, lpOverlapped=0x0) returned 1 [0028.638] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf2c | out: lpNewFilePointer=0x0) returned 1 [0028.638] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec0 | out: lpNewFilePointer=0x0) returned 1 [0028.638] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0xd8, lpNewFilePointer=0x0, dwMoveMethod=0x38cf3c | out: lpNewFilePointer=0x0) returned 1 [0028.638] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cef0 | out: lpNewFilePointer=0x0) returned 1 [0028.638] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ceb8 | out: lpNewFilePointer=0x0) returned 1 [0028.638] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce4c | out: lpNewFilePointer=0x0) returned 1 [0028.638] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0xe0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec8 | out: lpNewFilePointer=0x0) returned 1 [0028.638] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce7c | out: lpNewFilePointer=0x0) returned 1 [0028.638] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x53d, lpOverlapped=0x0) returned 1 [0028.638] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf2c | out: lpNewFilePointer=0x0) returned 1 [0028.638] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec0 | out: lpNewFilePointer=0x0) returned 1 [0028.639] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0xe0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf3c | out: lpNewFilePointer=0x0) returned 1 [0028.639] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cef0 | out: lpNewFilePointer=0x0) returned 1 [0028.639] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ceb8 | out: lpNewFilePointer=0x0) returned 1 [0028.639] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce4c | out: lpNewFilePointer=0x0) returned 1 [0028.639] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0xe8, lpNewFilePointer=0x0, dwMoveMethod=0x38cec8 | out: lpNewFilePointer=0x0) returned 1 [0028.639] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce7c | out: lpNewFilePointer=0x0) returned 1 [0028.639] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x535, lpOverlapped=0x0) returned 1 [0028.639] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf2c | out: lpNewFilePointer=0x0) returned 1 [0028.639] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec0 | out: lpNewFilePointer=0x0) returned 1 [0028.639] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0xe8, lpNewFilePointer=0x0, dwMoveMethod=0x38cf3c | out: lpNewFilePointer=0x0) returned 1 [0028.639] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cef0 | out: lpNewFilePointer=0x0) returned 1 [0028.639] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ceb8 | out: lpNewFilePointer=0x0) returned 1 [0028.639] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce4c | out: lpNewFilePointer=0x0) returned 1 [0028.640] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0xf0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec8 | out: lpNewFilePointer=0x0) returned 1 [0028.640] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce7c | out: lpNewFilePointer=0x0) returned 1 [0028.640] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x52d, lpOverlapped=0x0) returned 1 [0028.640] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf2c | out: lpNewFilePointer=0x0) returned 1 [0028.640] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec0 | out: lpNewFilePointer=0x0) returned 1 [0028.640] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0xf0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf3c | out: lpNewFilePointer=0x0) returned 1 [0028.640] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x525, lpOverlapped=0x0) returned 1 [0028.640] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x51d, lpOverlapped=0x0) returned 1 [0028.640] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x515, lpOverlapped=0x0) returned 1 [0028.641] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x50d, lpOverlapped=0x0) returned 1 [0028.641] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x505, lpOverlapped=0x0) returned 1 [0028.641] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x4fd, lpOverlapped=0x0) returned 1 [0028.641] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x4f5, lpOverlapped=0x0) returned 1 [0028.641] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x4ed, lpOverlapped=0x0) returned 1 [0028.641] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x4e5, lpOverlapped=0x0) returned 1 [0028.641] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x4dd, lpOverlapped=0x0) returned 1 [0028.641] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x4d5, lpOverlapped=0x0) returned 1 [0028.641] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x4cd, lpOverlapped=0x0) returned 1 [0028.641] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x4c5, lpOverlapped=0x0) returned 1 [0028.641] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x4bd, lpOverlapped=0x0) returned 1 [0028.642] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x4b5, lpOverlapped=0x0) returned 1 [0028.642] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x4ad, lpOverlapped=0x0) returned 1 [0028.642] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x4a5, lpOverlapped=0x0) returned 1 [0028.642] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x49d, lpOverlapped=0x0) returned 1 [0028.642] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x495, lpOverlapped=0x0) returned 1 [0028.642] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x48d, lpOverlapped=0x0) returned 1 [0028.642] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x485, lpOverlapped=0x0) returned 1 [0028.642] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x47d, lpOverlapped=0x0) returned 1 [0028.642] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x475, lpOverlapped=0x0) returned 1 [0028.642] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x46d, lpOverlapped=0x0) returned 1 [0028.642] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x465, lpOverlapped=0x0) returned 1 [0028.642] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x45d, lpOverlapped=0x0) returned 1 [0028.643] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x455, lpOverlapped=0x0) returned 1 [0028.643] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x44d, lpOverlapped=0x0) returned 1 [0028.643] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x445, lpOverlapped=0x0) returned 1 [0028.643] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x43d, lpOverlapped=0x0) returned 1 [0028.643] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x435, lpOverlapped=0x0) returned 1 [0028.643] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x42d, lpOverlapped=0x0) returned 1 [0028.643] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x425, lpOverlapped=0x0) returned 1 [0028.643] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x41d, lpOverlapped=0x0) returned 1 [0028.643] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x415, lpOverlapped=0x0) returned 1 [0028.643] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x40d, lpOverlapped=0x0) returned 1 [0028.643] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x405, lpOverlapped=0x0) returned 1 [0028.644] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x3fd, lpOverlapped=0x0) returned 1 [0028.644] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x3f5, lpOverlapped=0x0) returned 1 [0028.644] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x3ed, lpOverlapped=0x0) returned 1 [0028.644] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x3e5, lpOverlapped=0x0) returned 1 [0028.644] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x3dd, lpOverlapped=0x0) returned 1 [0028.644] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x3d5, lpOverlapped=0x0) returned 1 [0028.644] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x3cd, lpOverlapped=0x0) returned 1 [0028.644] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x3c5, lpOverlapped=0x0) returned 1 [0028.644] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x3bd, lpOverlapped=0x0) returned 1 [0028.644] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x3b5, lpOverlapped=0x0) returned 1 [0028.645] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x3ad, lpOverlapped=0x0) returned 1 [0028.645] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x3a5, lpOverlapped=0x0) returned 1 [0028.645] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x39d, lpOverlapped=0x0) returned 1 [0028.645] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x395, lpOverlapped=0x0) returned 1 [0028.645] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x38d, lpOverlapped=0x0) returned 1 [0028.645] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x385, lpOverlapped=0x0) returned 1 [0028.645] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x37d, lpOverlapped=0x0) returned 1 [0028.645] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x375, lpOverlapped=0x0) returned 1 [0028.645] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x36d, lpOverlapped=0x0) returned 1 [0028.646] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x365, lpOverlapped=0x0) returned 1 [0028.646] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x35d, lpOverlapped=0x0) returned 1 [0028.646] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x355, lpOverlapped=0x0) returned 1 [0028.646] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x34d, lpOverlapped=0x0) returned 1 [0028.646] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x345, lpOverlapped=0x0) returned 1 [0028.646] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x33d, lpOverlapped=0x0) returned 1 [0028.646] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x335, lpOverlapped=0x0) returned 1 [0028.646] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x32d, lpOverlapped=0x0) returned 1 [0028.646] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x325, lpOverlapped=0x0) returned 1 [0028.646] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x31d, lpOverlapped=0x0) returned 1 [0028.647] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x315, lpOverlapped=0x0) returned 1 [0028.647] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x30d, lpOverlapped=0x0) returned 1 [0028.647] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x305, lpOverlapped=0x0) returned 1 [0028.647] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x2fd, lpOverlapped=0x0) returned 1 [0028.647] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x2f5, lpOverlapped=0x0) returned 1 [0028.647] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x2ed, lpOverlapped=0x0) returned 1 [0028.647] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x2e5, lpOverlapped=0x0) returned 1 [0028.647] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x2dd, lpOverlapped=0x0) returned 1 [0028.647] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x2d5, lpOverlapped=0x0) returned 1 [0028.647] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x2cd, lpOverlapped=0x0) returned 1 [0028.648] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x2c5, lpOverlapped=0x0) returned 1 [0028.648] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x2bd, lpOverlapped=0x0) returned 1 [0028.648] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x2b5, lpOverlapped=0x0) returned 1 [0028.648] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x2ad, lpOverlapped=0x0) returned 1 [0028.648] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x2a5, lpOverlapped=0x0) returned 1 [0028.648] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x29d, lpOverlapped=0x0) returned 1 [0028.648] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x295, lpOverlapped=0x0) returned 1 [0028.648] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x28d, lpOverlapped=0x0) returned 1 [0028.648] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x285, lpOverlapped=0x0) returned 1 [0028.648] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x27d, lpOverlapped=0x0) returned 1 [0028.648] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x275, lpOverlapped=0x0) returned 1 [0028.648] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x26d, lpOverlapped=0x0) returned 1 [0028.648] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x265, lpOverlapped=0x0) returned 1 [0028.649] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x25d, lpOverlapped=0x0) returned 1 [0028.649] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x255, lpOverlapped=0x0) returned 1 [0028.649] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x24d, lpOverlapped=0x0) returned 1 [0028.649] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x245, lpOverlapped=0x0) returned 1 [0028.649] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x23d, lpOverlapped=0x0) returned 1 [0028.649] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x235, lpOverlapped=0x0) returned 1 [0028.649] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x22d, lpOverlapped=0x0) returned 1 [0028.649] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x225, lpOverlapped=0x0) returned 1 [0028.649] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x21d, lpOverlapped=0x0) returned 1 [0028.649] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x215, lpOverlapped=0x0) returned 1 [0028.649] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x20d, lpOverlapped=0x0) returned 1 [0028.649] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x205, lpOverlapped=0x0) returned 1 [0028.649] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x1fd, lpOverlapped=0x0) returned 1 [0028.649] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x1f5, lpOverlapped=0x0) returned 1 [0028.650] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x1ed, lpOverlapped=0x0) returned 1 [0028.650] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x1e5, lpOverlapped=0x0) returned 1 [0028.650] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x1dd, lpOverlapped=0x0) returned 1 [0028.650] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x1d5, lpOverlapped=0x0) returned 1 [0028.650] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x1cd, lpOverlapped=0x0) returned 1 [0028.650] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x1c5, lpOverlapped=0x0) returned 1 [0028.650] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x1bd, lpOverlapped=0x0) returned 1 [0028.650] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x1b5, lpOverlapped=0x0) returned 1 [0028.650] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x1ad, lpOverlapped=0x0) returned 1 [0028.650] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x1a5, lpOverlapped=0x0) returned 1 [0028.650] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x19d, lpOverlapped=0x0) returned 1 [0028.650] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x195, lpOverlapped=0x0) returned 1 [0028.650] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x18d, lpOverlapped=0x0) returned 1 [0028.650] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x185, lpOverlapped=0x0) returned 1 [0028.650] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x17d, lpOverlapped=0x0) returned 1 [0028.651] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x175, lpOverlapped=0x0) returned 1 [0028.651] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x16d, lpOverlapped=0x0) returned 1 [0028.651] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x165, lpOverlapped=0x0) returned 1 [0028.651] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x15d, lpOverlapped=0x0) returned 1 [0028.651] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x155, lpOverlapped=0x0) returned 1 [0028.651] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x14d, lpOverlapped=0x0) returned 1 [0028.651] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x145, lpOverlapped=0x0) returned 1 [0028.651] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x13d, lpOverlapped=0x0) returned 1 [0028.651] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x135, lpOverlapped=0x0) returned 1 [0028.651] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x12d, lpOverlapped=0x0) returned 1 [0028.651] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x125, lpOverlapped=0x0) returned 1 [0028.651] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x11d, lpOverlapped=0x0) returned 1 [0028.651] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x115, lpOverlapped=0x0) returned 1 [0028.651] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x10d, lpOverlapped=0x0) returned 1 [0028.651] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x105, lpOverlapped=0x0) returned 1 [0028.652] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0xfd, lpOverlapped=0x0) returned 1 [0028.652] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0xf5, lpOverlapped=0x0) returned 1 [0028.652] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0xed, lpOverlapped=0x0) returned 1 [0028.652] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0xe5, lpOverlapped=0x0) returned 1 [0028.652] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0xdd, lpOverlapped=0x0) returned 1 [0028.652] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0xd5, lpOverlapped=0x0) returned 1 [0028.652] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0xcd, lpOverlapped=0x0) returned 1 [0028.652] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0xc5, lpOverlapped=0x0) returned 1 [0028.652] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0xbd, lpOverlapped=0x0) returned 1 [0028.652] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0xb5, lpOverlapped=0x0) returned 1 [0028.652] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0xad, lpOverlapped=0x0) returned 1 [0028.652] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0xa5, lpOverlapped=0x0) returned 1 [0028.652] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x9d, lpOverlapped=0x0) returned 1 [0028.652] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x95, lpOverlapped=0x0) returned 1 [0028.653] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x8d, lpOverlapped=0x0) returned 1 [0028.653] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x85, lpOverlapped=0x0) returned 1 [0028.653] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x7d, lpOverlapped=0x0) returned 1 [0028.653] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x75, lpOverlapped=0x0) returned 1 [0028.653] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x6d, lpOverlapped=0x0) returned 1 [0028.653] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x65, lpOverlapped=0x0) returned 1 [0028.653] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x5d, lpOverlapped=0x0) returned 1 [0028.653] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x55, lpOverlapped=0x0) returned 1 [0028.653] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x4d, lpOverlapped=0x0) returned 1 [0028.653] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x45, lpOverlapped=0x0) returned 1 [0028.653] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x3d, lpOverlapped=0x0) returned 1 [0028.653] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x35, lpOverlapped=0x0) returned 1 [0028.653] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x2d, lpOverlapped=0x0) returned 1 [0028.653] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x25, lpOverlapped=0x0) returned 1 [0028.653] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x1d, lpOverlapped=0x0) returned 1 [0028.654] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x15, lpOverlapped=0x0) returned 1 [0028.654] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0xd, lpOverlapped=0x0) returned 1 [0028.654] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x5, lpOverlapped=0x0) returned 1 [0028.654] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x0, lpOverlapped=0x0) returned 1 [0028.654] AreFileApisANSI () returned 1 [0028.654] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38d728, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 77 [0028.654] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x552f28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0028.654] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x142) returned 0x552f90 [0028.654] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38d728, cbMultiByte=-1, lpWideCharStr=0x552f90, cchWideChar=77 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml") returned 77 [0028.654] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x552f28, cbMultiByte=-1, lpWideCharStr=0x55302a, cchWideChar=84 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml.masked") returned 84 [0028.654] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml.masked" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.xml.masked"), dwFlags=0x2) returned 1 [0028.655] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552f90 | out: hHeap=0x530000) returned 1 [0028.655] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552f28 | out: hHeap=0x530000) returned 1 [0028.655] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ed0 | out: hHeap=0x530000) returned 1 [0028.655] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548070 | out: hHeap=0x530000) returned 1 [0028.655] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547bb0 | out: hHeap=0x530000) returned 1 [0028.655] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x8f8, dwReserved0=0xfffffffe, dwReserved1=0x7716387a, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0028.655] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x50) returned 0x552ed0 [0028.655] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x50) returned 0x552f28 [0028.655] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552f28 | out: hHeap=0x530000) returned 1 [0028.655] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ed0 | out: hHeap=0x530000) returned 1 [0028.655] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8) returned 0x547bb0 [0028.655] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8) returned 0x548070 [0028.655] AreFileApisANSI () returned 1 [0028.655] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38d728, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0028.656] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x94) returned 0x552ed0 [0028.656] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38d728, cbMultiByte=-1, lpWideCharStr=0x552ed0, cchWideChar=74 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 74 [0028.656] CreateFileW (lpFileName="C:\\\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x38ce9c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6c [0028.657] GetFileType (hFile=0x6c) returned 0x1 [0028.657] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ed0 | out: hHeap=0x530000) returned 1 [0028.657] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cee8 | out: lpNewFilePointer=0x0) returned 1 [0028.657] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce9c | out: lpNewFilePointer=0x0) returned 1 [0028.657] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ced0 | out: lpNewFilePointer=0x0) returned 1 [0028.658] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ceb8 | out: lpNewFilePointer=0x0) returned 1 [0028.658] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce7c | out: lpNewFilePointer=0x0) returned 1 [0028.658] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ced0 | out: lpNewFilePointer=0x0) returned 1 [0028.658] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ceb8 | out: lpNewFilePointer=0x0) returned 1 [0028.658] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce7c | out: lpNewFilePointer=0x0) returned 1 [0028.658] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x558c60 [0028.658] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x8f8, lpOverlapped=0x0) returned 1 [0028.660] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf2c | out: lpNewFilePointer=0x0) returned 1 [0028.660] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cef0 | out: lpNewFilePointer=0x0) returned 1 [0028.660] GetLastError () returned 0x0 [0028.660] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ceb8 | out: lpNewFilePointer=0x0) returned 1 [0028.660] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce4c | out: lpNewFilePointer=0x0) returned 1 [0028.660] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x8, lpNewFilePointer=0x0, dwMoveMethod=0x38cec8 | out: lpNewFilePointer=0x0) returned 1 [0028.661] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce7c | out: lpNewFilePointer=0x0) returned 1 [0028.661] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x8f0, lpOverlapped=0x0) returned 1 [0028.661] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf2c | out: lpNewFilePointer=0x0) returned 1 [0028.661] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec0 | out: lpNewFilePointer=0x0) returned 1 [0028.661] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x8, lpNewFilePointer=0x0, dwMoveMethod=0x38cf3c | out: lpNewFilePointer=0x0) returned 1 [0028.661] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cef0 | out: lpNewFilePointer=0x0) returned 1 [0028.661] GetLastError () returned 0x0 [0028.661] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ceb8 | out: lpNewFilePointer=0x0) returned 1 [0028.661] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce4c | out: lpNewFilePointer=0x0) returned 1 [0028.662] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x10, lpNewFilePointer=0x0, dwMoveMethod=0x38cec8 | out: lpNewFilePointer=0x0) returned 1 [0028.662] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce7c | out: lpNewFilePointer=0x0) returned 1 [0028.662] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x8e8, lpOverlapped=0x0) returned 1 [0028.662] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf2c | out: lpNewFilePointer=0x0) returned 1 [0028.662] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec0 | out: lpNewFilePointer=0x0) returned 1 [0028.662] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x10, lpNewFilePointer=0x0, dwMoveMethod=0x38cf3c | out: lpNewFilePointer=0x0) returned 1 [0028.662] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cef0 | out: lpNewFilePointer=0x0) returned 1 [0028.662] GetLastError () returned 0x0 [0028.662] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ceb8 | out: lpNewFilePointer=0x0) returned 1 [0028.663] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce4c | out: lpNewFilePointer=0x0) returned 1 [0028.663] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x18, lpNewFilePointer=0x0, dwMoveMethod=0x38cec8 | out: lpNewFilePointer=0x0) returned 1 [0028.663] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce7c | out: lpNewFilePointer=0x0) returned 1 [0028.663] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x8e0, lpOverlapped=0x0) returned 1 [0028.663] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf2c | out: lpNewFilePointer=0x0) returned 1 [0028.663] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec0 | out: lpNewFilePointer=0x0) returned 1 [0028.663] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x18, lpNewFilePointer=0x0, dwMoveMethod=0x38cf3c | out: lpNewFilePointer=0x0) returned 1 [0028.663] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cef0 | out: lpNewFilePointer=0x0) returned 1 [0028.663] GetLastError () returned 0x0 [0028.663] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ceb8 | out: lpNewFilePointer=0x0) returned 1 [0028.664] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce4c | out: lpNewFilePointer=0x0) returned 1 [0028.664] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x20, lpNewFilePointer=0x0, dwMoveMethod=0x38cec8 | out: lpNewFilePointer=0x0) returned 1 [0028.664] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce7c | out: lpNewFilePointer=0x0) returned 1 [0028.664] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x8d8, lpOverlapped=0x0) returned 1 [0028.664] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf2c | out: lpNewFilePointer=0x0) returned 1 [0028.664] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec0 | out: lpNewFilePointer=0x0) returned 1 [0028.664] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x20, lpNewFilePointer=0x0, dwMoveMethod=0x38cf3c | out: lpNewFilePointer=0x0) returned 1 [0028.664] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cef0 | out: lpNewFilePointer=0x0) returned 1 [0028.664] GetLastError () returned 0x0 [0028.664] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ceb8 | out: lpNewFilePointer=0x0) returned 1 [0028.665] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce4c | out: lpNewFilePointer=0x0) returned 1 [0028.665] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x28, lpNewFilePointer=0x0, dwMoveMethod=0x38cec8 | out: lpNewFilePointer=0x0) returned 1 [0028.665] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce7c | out: lpNewFilePointer=0x0) returned 1 [0028.665] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x8d0, lpOverlapped=0x0) returned 1 [0028.665] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf2c | out: lpNewFilePointer=0x0) returned 1 [0028.665] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec0 | out: lpNewFilePointer=0x0) returned 1 [0028.665] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x28, lpNewFilePointer=0x0, dwMoveMethod=0x38cf3c | out: lpNewFilePointer=0x0) returned 1 [0028.665] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cef0 | out: lpNewFilePointer=0x0) returned 1 [0028.665] GetLastError () returned 0x0 [0028.665] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ceb8 | out: lpNewFilePointer=0x0) returned 1 [0028.666] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce4c | out: lpNewFilePointer=0x0) returned 1 [0028.666] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x30, lpNewFilePointer=0x0, dwMoveMethod=0x38cec8 | out: lpNewFilePointer=0x0) returned 1 [0028.666] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce7c | out: lpNewFilePointer=0x0) returned 1 [0028.666] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x8c8, lpOverlapped=0x0) returned 1 [0028.666] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf2c | out: lpNewFilePointer=0x0) returned 1 [0028.666] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec0 | out: lpNewFilePointer=0x0) returned 1 [0028.666] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x30, lpNewFilePointer=0x0, dwMoveMethod=0x38cf3c | out: lpNewFilePointer=0x0) returned 1 [0028.667] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cef0 | out: lpNewFilePointer=0x0) returned 1 [0028.667] GetLastError () returned 0x0 [0028.667] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ceb8 | out: lpNewFilePointer=0x0) returned 1 [0028.667] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce4c | out: lpNewFilePointer=0x0) returned 1 [0028.667] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x38, lpNewFilePointer=0x0, dwMoveMethod=0x38cec8 | out: lpNewFilePointer=0x0) returned 1 [0028.667] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce7c | out: lpNewFilePointer=0x0) returned 1 [0028.667] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x8c0, lpOverlapped=0x0) returned 1 [0028.667] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf2c | out: lpNewFilePointer=0x0) returned 1 [0028.668] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec0 | out: lpNewFilePointer=0x0) returned 1 [0028.668] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x38, lpNewFilePointer=0x0, dwMoveMethod=0x38cf3c | out: lpNewFilePointer=0x0) returned 1 [0028.668] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cef0 | out: lpNewFilePointer=0x0) returned 1 [0028.668] GetLastError () returned 0x0 [0028.668] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ceb8 | out: lpNewFilePointer=0x0) returned 1 [0028.668] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce4c | out: lpNewFilePointer=0x0) returned 1 [0028.668] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x40, lpNewFilePointer=0x0, dwMoveMethod=0x38cec8 | out: lpNewFilePointer=0x0) returned 1 [0028.668] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce7c | out: lpNewFilePointer=0x0) returned 1 [0028.668] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x8b8, lpOverlapped=0x0) returned 1 [0028.669] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf2c | out: lpNewFilePointer=0x0) returned 1 [0028.669] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec0 | out: lpNewFilePointer=0x0) returned 1 [0028.669] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x40, lpNewFilePointer=0x0, dwMoveMethod=0x38cf3c | out: lpNewFilePointer=0x0) returned 1 [0028.669] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cef0 | out: lpNewFilePointer=0x0) returned 1 [0028.669] GetLastError () returned 0x0 [0028.669] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ceb8 | out: lpNewFilePointer=0x0) returned 1 [0028.669] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce4c | out: lpNewFilePointer=0x0) returned 1 [0028.669] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x48, lpNewFilePointer=0x0, dwMoveMethod=0x38cec8 | out: lpNewFilePointer=0x0) returned 1 [0028.669] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce7c | out: lpNewFilePointer=0x0) returned 1 [0028.669] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x8b0, lpOverlapped=0x0) returned 1 [0028.670] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf2c | out: lpNewFilePointer=0x0) returned 1 [0028.670] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec0 | out: lpNewFilePointer=0x0) returned 1 [0028.670] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x48, lpNewFilePointer=0x0, dwMoveMethod=0x38cf3c | out: lpNewFilePointer=0x0) returned 1 [0028.670] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cef0 | out: lpNewFilePointer=0x0) returned 1 [0028.670] GetLastError () returned 0x0 [0028.670] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ceb8 | out: lpNewFilePointer=0x0) returned 1 [0028.670] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce4c | out: lpNewFilePointer=0x0) returned 1 [0028.670] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x50, lpNewFilePointer=0x0, dwMoveMethod=0x38cec8 | out: lpNewFilePointer=0x0) returned 1 [0028.670] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce7c | out: lpNewFilePointer=0x0) returned 1 [0028.671] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x8a8, lpOverlapped=0x0) returned 1 [0028.671] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf2c | out: lpNewFilePointer=0x0) returned 1 [0028.671] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec0 | out: lpNewFilePointer=0x0) returned 1 [0028.671] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x50, lpNewFilePointer=0x0, dwMoveMethod=0x38cf3c | out: lpNewFilePointer=0x0) returned 1 [0028.671] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cef0 | out: lpNewFilePointer=0x0) returned 1 [0028.671] GetLastError () returned 0x0 [0028.671] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ceb8 | out: lpNewFilePointer=0x0) returned 1 [0028.672] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce4c | out: lpNewFilePointer=0x0) returned 1 [0028.672] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x58, lpNewFilePointer=0x0, dwMoveMethod=0x38cec8 | out: lpNewFilePointer=0x0) returned 1 [0028.672] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce7c | out: lpNewFilePointer=0x0) returned 1 [0028.672] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x8a0, lpOverlapped=0x0) returned 1 [0028.672] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf2c | out: lpNewFilePointer=0x0) returned 1 [0028.672] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec0 | out: lpNewFilePointer=0x0) returned 1 [0028.672] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x58, lpNewFilePointer=0x0, dwMoveMethod=0x38cf3c | out: lpNewFilePointer=0x0) returned 1 [0028.672] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cef0 | out: lpNewFilePointer=0x0) returned 1 [0028.672] GetLastError () returned 0x0 [0028.672] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ceb8 | out: lpNewFilePointer=0x0) returned 1 [0028.673] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce4c | out: lpNewFilePointer=0x0) returned 1 [0028.673] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x60, lpNewFilePointer=0x0, dwMoveMethod=0x38cec8 | out: lpNewFilePointer=0x0) returned 1 [0028.673] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce7c | out: lpNewFilePointer=0x0) returned 1 [0028.673] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x898, lpOverlapped=0x0) returned 1 [0028.673] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf2c | out: lpNewFilePointer=0x0) returned 1 [0028.673] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec0 | out: lpNewFilePointer=0x0) returned 1 [0028.673] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x60, lpNewFilePointer=0x0, dwMoveMethod=0x38cf3c | out: lpNewFilePointer=0x0) returned 1 [0028.673] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cef0 | out: lpNewFilePointer=0x0) returned 1 [0028.673] GetLastError () returned 0x0 [0028.674] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ceb8 | out: lpNewFilePointer=0x0) returned 1 [0028.674] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce4c | out: lpNewFilePointer=0x0) returned 1 [0028.674] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x68, lpNewFilePointer=0x0, dwMoveMethod=0x38cec8 | out: lpNewFilePointer=0x0) returned 1 [0028.674] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce7c | out: lpNewFilePointer=0x0) returned 1 [0028.674] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x890, lpOverlapped=0x0) returned 1 [0028.674] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf2c | out: lpNewFilePointer=0x0) returned 1 [0028.674] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec0 | out: lpNewFilePointer=0x0) returned 1 [0028.674] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x68, lpNewFilePointer=0x0, dwMoveMethod=0x38cf3c | out: lpNewFilePointer=0x0) returned 1 [0028.674] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cef0 | out: lpNewFilePointer=0x0) returned 1 [0028.674] GetLastError () returned 0x0 [0028.675] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ceb8 | out: lpNewFilePointer=0x0) returned 1 [0028.675] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce4c | out: lpNewFilePointer=0x0) returned 1 [0028.675] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x70, lpNewFilePointer=0x0, dwMoveMethod=0x38cec8 | out: lpNewFilePointer=0x0) returned 1 [0028.675] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce7c | out: lpNewFilePointer=0x0) returned 1 [0028.675] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x888, lpOverlapped=0x0) returned 1 [0028.675] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf2c | out: lpNewFilePointer=0x0) returned 1 [0028.675] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec0 | out: lpNewFilePointer=0x0) returned 1 [0028.675] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x70, lpNewFilePointer=0x0, dwMoveMethod=0x38cf3c | out: lpNewFilePointer=0x0) returned 1 [0028.675] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cef0 | out: lpNewFilePointer=0x0) returned 1 [0028.676] GetLastError () returned 0x0 [0028.676] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ceb8 | out: lpNewFilePointer=0x0) returned 1 [0028.676] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce4c | out: lpNewFilePointer=0x0) returned 1 [0028.676] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x78, lpNewFilePointer=0x0, dwMoveMethod=0x38cec8 | out: lpNewFilePointer=0x0) returned 1 [0028.676] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce7c | out: lpNewFilePointer=0x0) returned 1 [0028.676] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x880, lpOverlapped=0x0) returned 1 [0028.676] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf2c | out: lpNewFilePointer=0x0) returned 1 [0028.676] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec0 | out: lpNewFilePointer=0x0) returned 1 [0028.676] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x78, lpNewFilePointer=0x0, dwMoveMethod=0x38cf3c | out: lpNewFilePointer=0x0) returned 1 [0028.676] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cef0 | out: lpNewFilePointer=0x0) returned 1 [0028.677] GetLastError () returned 0x0 [0028.677] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ceb8 | out: lpNewFilePointer=0x0) returned 1 [0028.677] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce4c | out: lpNewFilePointer=0x0) returned 1 [0028.677] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x80, lpNewFilePointer=0x0, dwMoveMethod=0x38cec8 | out: lpNewFilePointer=0x0) returned 1 [0028.677] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce7c | out: lpNewFilePointer=0x0) returned 1 [0028.677] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x878, lpOverlapped=0x0) returned 1 [0028.677] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf2c | out: lpNewFilePointer=0x0) returned 1 [0028.677] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec0 | out: lpNewFilePointer=0x0) returned 1 [0028.677] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x80, lpNewFilePointer=0x0, dwMoveMethod=0x38cf3c | out: lpNewFilePointer=0x0) returned 1 [0028.677] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cef0 | out: lpNewFilePointer=0x0) returned 1 [0028.678] GetLastError () returned 0x0 [0028.678] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ceb8 | out: lpNewFilePointer=0x0) returned 1 [0028.678] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce4c | out: lpNewFilePointer=0x0) returned 1 [0028.678] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x88, lpNewFilePointer=0x0, dwMoveMethod=0x38cec8 | out: lpNewFilePointer=0x0) returned 1 [0028.678] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce7c | out: lpNewFilePointer=0x0) returned 1 [0028.678] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x870, lpOverlapped=0x0) returned 1 [0028.678] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf2c | out: lpNewFilePointer=0x0) returned 1 [0028.678] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec0 | out: lpNewFilePointer=0x0) returned 1 [0028.678] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x88, lpNewFilePointer=0x0, dwMoveMethod=0x38cf3c | out: lpNewFilePointer=0x0) returned 1 [0028.678] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cef0 | out: lpNewFilePointer=0x0) returned 1 [0028.679] GetLastError () returned 0x0 [0028.679] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ceb8 | out: lpNewFilePointer=0x0) returned 1 [0028.679] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce4c | out: lpNewFilePointer=0x0) returned 1 [0028.679] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x90, lpNewFilePointer=0x0, dwMoveMethod=0x38cec8 | out: lpNewFilePointer=0x0) returned 1 [0028.679] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce7c | out: lpNewFilePointer=0x0) returned 1 [0028.679] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x868, lpOverlapped=0x0) returned 1 [0028.679] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf2c | out: lpNewFilePointer=0x0) returned 1 [0028.679] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec0 | out: lpNewFilePointer=0x0) returned 1 [0028.679] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x90, lpNewFilePointer=0x0, dwMoveMethod=0x38cf3c | out: lpNewFilePointer=0x0) returned 1 [0028.680] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cef0 | out: lpNewFilePointer=0x0) returned 1 [0028.680] GetLastError () returned 0x0 [0028.680] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ceb8 | out: lpNewFilePointer=0x0) returned 1 [0028.680] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce4c | out: lpNewFilePointer=0x0) returned 1 [0028.680] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x98, lpNewFilePointer=0x0, dwMoveMethod=0x38cec8 | out: lpNewFilePointer=0x0) returned 1 [0028.680] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce7c | out: lpNewFilePointer=0x0) returned 1 [0028.680] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x860, lpOverlapped=0x0) returned 1 [0028.680] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf2c | out: lpNewFilePointer=0x0) returned 1 [0028.681] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec0 | out: lpNewFilePointer=0x0) returned 1 [0028.681] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x98, lpNewFilePointer=0x0, dwMoveMethod=0x38cf3c | out: lpNewFilePointer=0x0) returned 1 [0028.681] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cef0 | out: lpNewFilePointer=0x0) returned 1 [0028.681] GetLastError () returned 0x0 [0028.681] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ceb8 | out: lpNewFilePointer=0x0) returned 1 [0028.681] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce4c | out: lpNewFilePointer=0x0) returned 1 [0028.681] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0xa0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec8 | out: lpNewFilePointer=0x0) returned 1 [0028.681] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce7c | out: lpNewFilePointer=0x0) returned 1 [0028.681] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x858, lpOverlapped=0x0) returned 1 [0028.681] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf2c | out: lpNewFilePointer=0x0) returned 1 [0028.682] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec0 | out: lpNewFilePointer=0x0) returned 1 [0028.682] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0xa0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf3c | out: lpNewFilePointer=0x0) returned 1 [0028.682] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cef0 | out: lpNewFilePointer=0x0) returned 1 [0028.682] GetLastError () returned 0x0 [0028.682] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ceb8 | out: lpNewFilePointer=0x0) returned 1 [0028.682] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce4c | out: lpNewFilePointer=0x0) returned 1 [0028.682] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0xa8, lpNewFilePointer=0x0, dwMoveMethod=0x38cec8 | out: lpNewFilePointer=0x0) returned 1 [0028.682] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce7c | out: lpNewFilePointer=0x0) returned 1 [0028.682] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x850, lpOverlapped=0x0) returned 1 [0028.682] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf2c | out: lpNewFilePointer=0x0) returned 1 [0028.683] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec0 | out: lpNewFilePointer=0x0) returned 1 [0028.683] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0xa8, lpNewFilePointer=0x0, dwMoveMethod=0x38cf3c | out: lpNewFilePointer=0x0) returned 1 [0028.683] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cef0 | out: lpNewFilePointer=0x0) returned 1 [0028.683] GetLastError () returned 0x0 [0028.683] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ceb8 | out: lpNewFilePointer=0x0) returned 1 [0028.683] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce4c | out: lpNewFilePointer=0x0) returned 1 [0028.683] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0xb0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec8 | out: lpNewFilePointer=0x0) returned 1 [0028.683] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce7c | out: lpNewFilePointer=0x0) returned 1 [0028.683] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x848, lpOverlapped=0x0) returned 1 [0028.684] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf2c | out: lpNewFilePointer=0x0) returned 1 [0028.696] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec0 | out: lpNewFilePointer=0x0) returned 1 [0028.696] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0xb0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf3c | out: lpNewFilePointer=0x0) returned 1 [0028.696] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cef0 | out: lpNewFilePointer=0x0) returned 1 [0028.696] GetLastError () returned 0x0 [0028.697] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ceb8 | out: lpNewFilePointer=0x0) returned 1 [0028.697] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce4c | out: lpNewFilePointer=0x0) returned 1 [0028.697] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0xb8, lpNewFilePointer=0x0, dwMoveMethod=0x38cec8 | out: lpNewFilePointer=0x0) returned 1 [0028.697] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce7c | out: lpNewFilePointer=0x0) returned 1 [0028.697] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x840, lpOverlapped=0x0) returned 1 [0028.698] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf2c | out: lpNewFilePointer=0x0) returned 1 [0028.698] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec0 | out: lpNewFilePointer=0x0) returned 1 [0028.698] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0xb8, lpNewFilePointer=0x0, dwMoveMethod=0x38cf3c | out: lpNewFilePointer=0x0) returned 1 [0028.698] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cef0 | out: lpNewFilePointer=0x0) returned 1 [0028.698] GetLastError () returned 0x0 [0028.698] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ceb8 | out: lpNewFilePointer=0x0) returned 1 [0028.698] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce4c | out: lpNewFilePointer=0x0) returned 1 [0028.698] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0xc0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec8 | out: lpNewFilePointer=0x0) returned 1 [0028.699] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce7c | out: lpNewFilePointer=0x0) returned 1 [0028.699] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x838, lpOverlapped=0x0) returned 1 [0028.699] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf2c | out: lpNewFilePointer=0x0) returned 1 [0028.699] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec0 | out: lpNewFilePointer=0x0) returned 1 [0028.699] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0xc0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf3c | out: lpNewFilePointer=0x0) returned 1 [0028.699] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cef0 | out: lpNewFilePointer=0x0) returned 1 [0028.699] GetLastError () returned 0x0 [0028.699] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ceb8 | out: lpNewFilePointer=0x0) returned 1 [0028.699] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce4c | out: lpNewFilePointer=0x0) returned 1 [0028.700] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0xc8, lpNewFilePointer=0x0, dwMoveMethod=0x38cec8 | out: lpNewFilePointer=0x0) returned 1 [0028.700] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce7c | out: lpNewFilePointer=0x0) returned 1 [0028.700] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x830, lpOverlapped=0x0) returned 1 [0028.700] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf2c | out: lpNewFilePointer=0x0) returned 1 [0028.700] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec0 | out: lpNewFilePointer=0x0) returned 1 [0028.700] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0xc8, lpNewFilePointer=0x0, dwMoveMethod=0x38cf3c | out: lpNewFilePointer=0x0) returned 1 [0028.700] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cef0 | out: lpNewFilePointer=0x0) returned 1 [0028.700] GetLastError () returned 0x0 [0028.700] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ceb8 | out: lpNewFilePointer=0x0) returned 1 [0028.700] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce4c | out: lpNewFilePointer=0x0) returned 1 [0028.701] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0xd0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec8 | out: lpNewFilePointer=0x0) returned 1 [0028.701] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce7c | out: lpNewFilePointer=0x0) returned 1 [0028.701] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x828, lpOverlapped=0x0) returned 1 [0028.701] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf2c | out: lpNewFilePointer=0x0) returned 1 [0028.701] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec0 | out: lpNewFilePointer=0x0) returned 1 [0028.701] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0xd0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf3c | out: lpNewFilePointer=0x0) returned 1 [0028.701] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cef0 | out: lpNewFilePointer=0x0) returned 1 [0028.701] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ceb8 | out: lpNewFilePointer=0x0) returned 1 [0028.701] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce4c | out: lpNewFilePointer=0x0) returned 1 [0028.701] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0xd8, lpNewFilePointer=0x0, dwMoveMethod=0x38cec8 | out: lpNewFilePointer=0x0) returned 1 [0028.701] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce7c | out: lpNewFilePointer=0x0) returned 1 [0028.702] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x820, lpOverlapped=0x0) returned 1 [0028.702] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf2c | out: lpNewFilePointer=0x0) returned 1 [0028.702] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec0 | out: lpNewFilePointer=0x0) returned 1 [0028.702] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0xd8, lpNewFilePointer=0x0, dwMoveMethod=0x38cf3c | out: lpNewFilePointer=0x0) returned 1 [0028.702] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cef0 | out: lpNewFilePointer=0x0) returned 1 [0028.702] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ceb8 | out: lpNewFilePointer=0x0) returned 1 [0028.703] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce4c | out: lpNewFilePointer=0x0) returned 1 [0028.703] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0xe0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec8 | out: lpNewFilePointer=0x0) returned 1 [0028.703] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce7c | out: lpNewFilePointer=0x0) returned 1 [0028.703] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x818, lpOverlapped=0x0) returned 1 [0028.703] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf2c | out: lpNewFilePointer=0x0) returned 1 [0028.703] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec0 | out: lpNewFilePointer=0x0) returned 1 [0028.703] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0xe0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf3c | out: lpNewFilePointer=0x0) returned 1 [0028.703] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cef0 | out: lpNewFilePointer=0x0) returned 1 [0028.703] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ceb8 | out: lpNewFilePointer=0x0) returned 1 [0028.703] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce4c | out: lpNewFilePointer=0x0) returned 1 [0028.704] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0xe8, lpNewFilePointer=0x0, dwMoveMethod=0x38cec8 | out: lpNewFilePointer=0x0) returned 1 [0028.704] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce7c | out: lpNewFilePointer=0x0) returned 1 [0028.704] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x810, lpOverlapped=0x0) returned 1 [0028.704] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf2c | out: lpNewFilePointer=0x0) returned 1 [0028.704] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec0 | out: lpNewFilePointer=0x0) returned 1 [0028.704] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0xe8, lpNewFilePointer=0x0, dwMoveMethod=0x38cf3c | out: lpNewFilePointer=0x0) returned 1 [0028.704] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cef0 | out: lpNewFilePointer=0x0) returned 1 [0028.704] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ceb8 | out: lpNewFilePointer=0x0) returned 1 [0028.704] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce4c | out: lpNewFilePointer=0x0) returned 1 [0028.704] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0xf0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec8 | out: lpNewFilePointer=0x0) returned 1 [0028.704] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce7c | out: lpNewFilePointer=0x0) returned 1 [0028.704] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x808, lpOverlapped=0x0) returned 1 [0028.704] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf2c | out: lpNewFilePointer=0x0) returned 1 [0028.705] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec0 | out: lpNewFilePointer=0x0) returned 1 [0028.705] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0xf0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf3c | out: lpNewFilePointer=0x0) returned 1 [0028.705] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x800, lpOverlapped=0x0) returned 1 [0028.705] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x7f8, lpOverlapped=0x0) returned 1 [0028.705] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x7f0, lpOverlapped=0x0) returned 1 [0028.705] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x7e8, lpOverlapped=0x0) returned 1 [0028.705] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x7e0, lpOverlapped=0x0) returned 1 [0028.705] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x7d8, lpOverlapped=0x0) returned 1 [0028.705] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x7d0, lpOverlapped=0x0) returned 1 [0028.705] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x7c8, lpOverlapped=0x0) returned 1 [0028.705] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x7c0, lpOverlapped=0x0) returned 1 [0028.706] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x7b8, lpOverlapped=0x0) returned 1 [0028.706] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x7b0, lpOverlapped=0x0) returned 1 [0028.706] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x7a8, lpOverlapped=0x0) returned 1 [0028.706] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x7a0, lpOverlapped=0x0) returned 1 [0028.706] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x798, lpOverlapped=0x0) returned 1 [0028.706] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x790, lpOverlapped=0x0) returned 1 [0028.706] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x788, lpOverlapped=0x0) returned 1 [0028.706] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x780, lpOverlapped=0x0) returned 1 [0028.706] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x778, lpOverlapped=0x0) returned 1 [0028.706] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x770, lpOverlapped=0x0) returned 1 [0028.707] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x768, lpOverlapped=0x0) returned 1 [0028.707] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x760, lpOverlapped=0x0) returned 1 [0028.707] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x758, lpOverlapped=0x0) returned 1 [0028.707] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x750, lpOverlapped=0x0) returned 1 [0028.707] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x748, lpOverlapped=0x0) returned 1 [0028.707] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x740, lpOverlapped=0x0) returned 1 [0028.707] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x738, lpOverlapped=0x0) returned 1 [0028.707] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x730, lpOverlapped=0x0) returned 1 [0028.707] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x728, lpOverlapped=0x0) returned 1 [0028.707] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x720, lpOverlapped=0x0) returned 1 [0028.707] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x718, lpOverlapped=0x0) returned 1 [0028.708] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x710, lpOverlapped=0x0) returned 1 [0028.708] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x708, lpOverlapped=0x0) returned 1 [0028.708] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x700, lpOverlapped=0x0) returned 1 [0028.708] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x6f8, lpOverlapped=0x0) returned 1 [0028.708] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x6f0, lpOverlapped=0x0) returned 1 [0028.708] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x6e8, lpOverlapped=0x0) returned 1 [0028.708] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x6e0, lpOverlapped=0x0) returned 1 [0028.708] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x6d8, lpOverlapped=0x0) returned 1 [0028.708] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x6d0, lpOverlapped=0x0) returned 1 [0028.708] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x6c8, lpOverlapped=0x0) returned 1 [0028.708] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x6c0, lpOverlapped=0x0) returned 1 [0028.709] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x6b8, lpOverlapped=0x0) returned 1 [0028.709] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x6b0, lpOverlapped=0x0) returned 1 [0028.709] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x6a8, lpOverlapped=0x0) returned 1 [0028.709] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x6a0, lpOverlapped=0x0) returned 1 [0028.709] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x698, lpOverlapped=0x0) returned 1 [0028.709] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x690, lpOverlapped=0x0) returned 1 [0028.709] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x688, lpOverlapped=0x0) returned 1 [0028.709] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x680, lpOverlapped=0x0) returned 1 [0028.709] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x678, lpOverlapped=0x0) returned 1 [0028.709] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x670, lpOverlapped=0x0) returned 1 [0028.709] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x668, lpOverlapped=0x0) returned 1 [0028.710] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x660, lpOverlapped=0x0) returned 1 [0028.710] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x658, lpOverlapped=0x0) returned 1 [0028.710] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x650, lpOverlapped=0x0) returned 1 [0028.710] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x648, lpOverlapped=0x0) returned 1 [0028.710] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x640, lpOverlapped=0x0) returned 1 [0028.710] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x638, lpOverlapped=0x0) returned 1 [0028.710] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x630, lpOverlapped=0x0) returned 1 [0028.710] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x628, lpOverlapped=0x0) returned 1 [0028.710] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x620, lpOverlapped=0x0) returned 1 [0028.710] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x618, lpOverlapped=0x0) returned 1 [0028.710] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x610, lpOverlapped=0x0) returned 1 [0028.711] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x608, lpOverlapped=0x0) returned 1 [0028.711] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x600, lpOverlapped=0x0) returned 1 [0028.711] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x5f8, lpOverlapped=0x0) returned 1 [0028.711] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x5f0, lpOverlapped=0x0) returned 1 [0028.711] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x5e8, lpOverlapped=0x0) returned 1 [0028.711] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x5e0, lpOverlapped=0x0) returned 1 [0028.711] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x5d8, lpOverlapped=0x0) returned 1 [0028.711] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x5d0, lpOverlapped=0x0) returned 1 [0028.711] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x5c8, lpOverlapped=0x0) returned 1 [0028.711] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x5c0, lpOverlapped=0x0) returned 1 [0028.712] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x5b8, lpOverlapped=0x0) returned 1 [0028.713] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x5b0, lpOverlapped=0x0) returned 1 [0028.713] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x5a8, lpOverlapped=0x0) returned 1 [0028.713] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x5a0, lpOverlapped=0x0) returned 1 [0028.713] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x598, lpOverlapped=0x0) returned 1 [0028.713] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x590, lpOverlapped=0x0) returned 1 [0028.713] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x588, lpOverlapped=0x0) returned 1 [0028.713] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x580, lpOverlapped=0x0) returned 1 [0028.713] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x578, lpOverlapped=0x0) returned 1 [0028.713] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x570, lpOverlapped=0x0) returned 1 [0028.713] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x568, lpOverlapped=0x0) returned 1 [0028.713] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x560, lpOverlapped=0x0) returned 1 [0028.713] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x558, lpOverlapped=0x0) returned 1 [0028.714] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x550, lpOverlapped=0x0) returned 1 [0028.714] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x548, lpOverlapped=0x0) returned 1 [0028.714] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x540, lpOverlapped=0x0) returned 1 [0028.714] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x538, lpOverlapped=0x0) returned 1 [0028.714] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x530, lpOverlapped=0x0) returned 1 [0028.714] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x528, lpOverlapped=0x0) returned 1 [0028.714] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x520, lpOverlapped=0x0) returned 1 [0028.714] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x518, lpOverlapped=0x0) returned 1 [0028.714] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x510, lpOverlapped=0x0) returned 1 [0028.714] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x508, lpOverlapped=0x0) returned 1 [0028.714] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x500, lpOverlapped=0x0) returned 1 [0028.714] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x4f8, lpOverlapped=0x0) returned 1 [0028.714] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x4f0, lpOverlapped=0x0) returned 1 [0028.715] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x4e8, lpOverlapped=0x0) returned 1 [0028.715] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x4e0, lpOverlapped=0x0) returned 1 [0028.715] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x4d8, lpOverlapped=0x0) returned 1 [0028.715] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x4d0, lpOverlapped=0x0) returned 1 [0028.715] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x4c8, lpOverlapped=0x0) returned 1 [0028.715] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x4c0, lpOverlapped=0x0) returned 1 [0028.715] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x4b8, lpOverlapped=0x0) returned 1 [0028.715] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x4b0, lpOverlapped=0x0) returned 1 [0028.715] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x4a8, lpOverlapped=0x0) returned 1 [0028.715] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x4a0, lpOverlapped=0x0) returned 1 [0028.715] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x498, lpOverlapped=0x0) returned 1 [0028.715] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x490, lpOverlapped=0x0) returned 1 [0028.715] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x488, lpOverlapped=0x0) returned 1 [0028.715] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x480, lpOverlapped=0x0) returned 1 [0028.716] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x478, lpOverlapped=0x0) returned 1 [0028.716] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x470, lpOverlapped=0x0) returned 1 [0028.716] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x468, lpOverlapped=0x0) returned 1 [0028.716] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x460, lpOverlapped=0x0) returned 1 [0028.716] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x458, lpOverlapped=0x0) returned 1 [0028.716] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x450, lpOverlapped=0x0) returned 1 [0028.716] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x448, lpOverlapped=0x0) returned 1 [0028.716] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x440, lpOverlapped=0x0) returned 1 [0028.716] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x438, lpOverlapped=0x0) returned 1 [0028.716] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x430, lpOverlapped=0x0) returned 1 [0028.716] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x428, lpOverlapped=0x0) returned 1 [0028.716] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x420, lpOverlapped=0x0) returned 1 [0028.716] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x418, lpOverlapped=0x0) returned 1 [0028.716] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x410, lpOverlapped=0x0) returned 1 [0028.716] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x408, lpOverlapped=0x0) returned 1 [0028.717] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x400, lpOverlapped=0x0) returned 1 [0028.717] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x3f8, lpOverlapped=0x0) returned 1 [0028.717] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x3f0, lpOverlapped=0x0) returned 1 [0028.717] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x3e8, lpOverlapped=0x0) returned 1 [0028.717] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x3e0, lpOverlapped=0x0) returned 1 [0028.717] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x3d8, lpOverlapped=0x0) returned 1 [0028.717] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x3d0, lpOverlapped=0x0) returned 1 [0028.717] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x3c8, lpOverlapped=0x0) returned 1 [0028.717] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x3c0, lpOverlapped=0x0) returned 1 [0028.717] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x3b8, lpOverlapped=0x0) returned 1 [0028.717] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x3b0, lpOverlapped=0x0) returned 1 [0028.717] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x3a8, lpOverlapped=0x0) returned 1 [0028.717] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x3a0, lpOverlapped=0x0) returned 1 [0028.717] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x398, lpOverlapped=0x0) returned 1 [0028.718] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x390, lpOverlapped=0x0) returned 1 [0028.718] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x388, lpOverlapped=0x0) returned 1 [0028.718] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x380, lpOverlapped=0x0) returned 1 [0028.718] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x378, lpOverlapped=0x0) returned 1 [0028.718] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x370, lpOverlapped=0x0) returned 1 [0028.718] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x368, lpOverlapped=0x0) returned 1 [0028.718] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x360, lpOverlapped=0x0) returned 1 [0028.718] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x358, lpOverlapped=0x0) returned 1 [0028.718] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x350, lpOverlapped=0x0) returned 1 [0028.718] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x348, lpOverlapped=0x0) returned 1 [0028.719] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x340, lpOverlapped=0x0) returned 1 [0028.719] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x338, lpOverlapped=0x0) returned 1 [0028.719] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x330, lpOverlapped=0x0) returned 1 [0028.719] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x328, lpOverlapped=0x0) returned 1 [0028.719] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x320, lpOverlapped=0x0) returned 1 [0028.719] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x318, lpOverlapped=0x0) returned 1 [0028.719] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x310, lpOverlapped=0x0) returned 1 [0028.719] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x308, lpOverlapped=0x0) returned 1 [0028.719] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x300, lpOverlapped=0x0) returned 1 [0028.719] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x2f8, lpOverlapped=0x0) returned 1 [0028.719] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x2f0, lpOverlapped=0x0) returned 1 [0028.719] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x2e8, lpOverlapped=0x0) returned 1 [0028.719] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x2e0, lpOverlapped=0x0) returned 1 [0028.719] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x2d8, lpOverlapped=0x0) returned 1 [0028.720] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x2d0, lpOverlapped=0x0) returned 1 [0028.720] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x2c8, lpOverlapped=0x0) returned 1 [0028.720] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x2c0, lpOverlapped=0x0) returned 1 [0028.720] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x2b8, lpOverlapped=0x0) returned 1 [0028.720] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x2b0, lpOverlapped=0x0) returned 1 [0028.720] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x2a8, lpOverlapped=0x0) returned 1 [0028.720] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x2a0, lpOverlapped=0x0) returned 1 [0028.720] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x298, lpOverlapped=0x0) returned 1 [0028.720] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x290, lpOverlapped=0x0) returned 1 [0028.720] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x288, lpOverlapped=0x0) returned 1 [0028.720] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x280, lpOverlapped=0x0) returned 1 [0028.720] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x278, lpOverlapped=0x0) returned 1 [0028.720] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x270, lpOverlapped=0x0) returned 1 [0028.720] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x268, lpOverlapped=0x0) returned 1 [0028.720] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x260, lpOverlapped=0x0) returned 1 [0028.721] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x258, lpOverlapped=0x0) returned 1 [0028.721] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x250, lpOverlapped=0x0) returned 1 [0028.721] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x248, lpOverlapped=0x0) returned 1 [0028.721] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x240, lpOverlapped=0x0) returned 1 [0028.721] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x238, lpOverlapped=0x0) returned 1 [0028.721] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x230, lpOverlapped=0x0) returned 1 [0028.721] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x228, lpOverlapped=0x0) returned 1 [0028.721] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x220, lpOverlapped=0x0) returned 1 [0028.721] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x218, lpOverlapped=0x0) returned 1 [0028.721] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x210, lpOverlapped=0x0) returned 1 [0028.721] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x208, lpOverlapped=0x0) returned 1 [0028.721] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x200, lpOverlapped=0x0) returned 1 [0028.721] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x1f8, lpOverlapped=0x0) returned 1 [0028.721] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x1f0, lpOverlapped=0x0) returned 1 [0028.721] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x1e8, lpOverlapped=0x0) returned 1 [0028.722] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x1e0, lpOverlapped=0x0) returned 1 [0028.722] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x1d8, lpOverlapped=0x0) returned 1 [0028.722] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x1d0, lpOverlapped=0x0) returned 1 [0028.722] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x1c8, lpOverlapped=0x0) returned 1 [0028.722] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x1c0, lpOverlapped=0x0) returned 1 [0028.722] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x1b8, lpOverlapped=0x0) returned 1 [0028.722] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x1b0, lpOverlapped=0x0) returned 1 [0028.722] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x1a8, lpOverlapped=0x0) returned 1 [0028.722] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x1a0, lpOverlapped=0x0) returned 1 [0028.722] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x198, lpOverlapped=0x0) returned 1 [0028.722] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x190, lpOverlapped=0x0) returned 1 [0028.722] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x188, lpOverlapped=0x0) returned 1 [0028.722] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x180, lpOverlapped=0x0) returned 1 [0028.722] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x178, lpOverlapped=0x0) returned 1 [0028.722] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x170, lpOverlapped=0x0) returned 1 [0028.723] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x168, lpOverlapped=0x0) returned 1 [0028.723] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x160, lpOverlapped=0x0) returned 1 [0028.723] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x158, lpOverlapped=0x0) returned 1 [0028.723] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x150, lpOverlapped=0x0) returned 1 [0028.723] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x148, lpOverlapped=0x0) returned 1 [0028.723] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x140, lpOverlapped=0x0) returned 1 [0028.723] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x138, lpOverlapped=0x0) returned 1 [0028.725] AreFileApisANSI () returned 1 [0028.725] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38d728, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0028.725] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x552f28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0028.725] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x136) returned 0x552f90 [0028.725] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38d728, cbMultiByte=-1, lpWideCharStr=0x552f90, cchWideChar=74 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 74 [0028.725] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x552f28, cbMultiByte=-1, lpWideCharStr=0x553024, cchWideChar=81 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml.masked") returned 81 [0028.725] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml.masked" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\setup.xml.masked"), dwFlags=0x2) returned 1 [0028.728] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552f90 | out: hHeap=0x530000) returned 1 [0028.728] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552f28 | out: hHeap=0x530000) returned 1 [0028.728] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ed0 | out: hHeap=0x530000) returned 1 [0028.728] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548070 | out: hHeap=0x530000) returned 1 [0028.728] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547bb0 | out: hHeap=0x530000) returned 1 [0028.728] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x8f8, dwReserved0=0xfffffffe, dwReserved1=0x7716387a, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0028.728] FindClose (in: hFindFile=0x547ad0 | out: hFindFile=0x547ad0) returned 1 [0028.728] FindNextFileA (in: hFindFile=0x552e90, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe8729610, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xecdfa490, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x38d9d4, dwReserved1=0x77163c74, cFileName="{90140000-0018-0409-1000-0000000FF1CE}-C", cAlternateFileName="{90140~2")) returned 1 [0028.728] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x40) returned 0x548358 [0028.728] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x40) returned 0x5483a0 [0028.728] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x40) returned 0x5483e8 [0028.728] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5483a0 | out: hHeap=0x530000) returned 1 [0028.728] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5483e8 | out: hHeap=0x530000) returned 1 [0028.728] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548358 | out: hHeap=0x530000) returned 1 [0028.728] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x40) returned 0x548358 [0028.728] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x120) returned 0x552ed0 [0028.728] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x50) returned 0x552ff8 [0028.728] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x77) returned 0x5422e8 [0028.728] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ff8 | out: hHeap=0x530000) returned 1 [0028.728] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8) returned 0x547bb0 [0028.728] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8) returned 0x548070 [0028.729] AreFileApisANSI () returned 1 [0028.729] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5422e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0028.729] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xba) returned 0x552ff8 [0028.729] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5422e8, cbMultiByte=-1, lpWideCharStr=0x552ff8, cchWideChar=93 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\@@_OpenTheBrowserTOR_@@.html") returned 93 [0028.729] CreateFileW (lpFileName="C:\\\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\@@_OpenTheBrowserTOR_@@.html" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\@@_openthebrowsertor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x38cee8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x68 [0028.735] GetFileType (hFile=0x68) returned 0x1 [0028.735] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ff8 | out: hHeap=0x530000) returned 1 [0028.736] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x557c58 [0028.736] GetLastError () returned 0x0 [0028.737] AreFileApisANSI () returned 1 [0028.737] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5422e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 98 [0028.737] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xc4) returned 0x552ff8 [0028.737] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5422e8, cbMultiByte=-1, lpWideCharStr=0x552ff8, cchWideChar=98 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html") returned 98 [0028.737] CreateFileW (lpFileName="C:\\\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\@@_îòêðûòü_â_áðàóçåðå_tor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x38cee8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x68 [0028.737] GetFileType (hFile=0x68) returned 0x1 [0028.738] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ff8 | out: hHeap=0x530000) returned 1 [0028.738] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x557c58 [0028.738] GetLastError () returned 0x0 [0028.739] FindFirstFileA (in: lpFileName="C:\\\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe8729610, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x64c53000, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x64c53000, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x76000472, dwReserved1=0xf1, cFileName=".", cAlternateFileName="")) returned 0x547ad0 [0028.739] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe8729610, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x64c53000, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x64c53000, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x76000472, dwReserved1=0xf1, cFileName="..", cAlternateFileName="")) returned 1 [0028.739] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c53000, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x64c53000, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x64c53000, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x76000472, dwReserved1=0xf1, cFileName="@@_OpenTheBrowserTOR_@@.html", cAlternateFileName="@@_OPE~1.HTM")) returned 1 [0028.739] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x60) returned 0x552ed0 [0028.739] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x60) returned 0x552f38 [0028.739] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552f38 | out: hHeap=0x530000) returned 1 [0028.739] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20) returned 0x549570 [0028.739] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x549570 | out: hHeap=0x530000) returned 1 [0028.739] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ed0 | out: hHeap=0x530000) returned 1 [0028.739] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c53000, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x64c53000, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x64c53000, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x530000, dwReserved1=0x552f30, cFileName="@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html", cAlternateFileName="@@____~1.HTM")) returned 1 [0028.739] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x70) returned 0x552ed0 [0028.739] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x70) returned 0x552f48 [0028.739] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552f48 | out: hHeap=0x530000) returned 1 [0028.739] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x30) returned 0x548070 [0028.739] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548070 | out: hHeap=0x530000) returned 1 [0028.739] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ed0 | out: hHeap=0x530000) returned 1 [0028.739] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe874f770, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x263400, dwReserved0=0x38d070, dwReserved1=0x77163c74, cFileName="PowerPointMUI.msi", cAlternateFileName="POWERP~1.MSI")) returned 1 [0028.739] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x60) returned 0x552ed0 [0028.739] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x60) returned 0x552f38 [0028.739] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552f38 | out: hHeap=0x530000) returned 1 [0028.739] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ed0 | out: hHeap=0x530000) returned 1 [0028.739] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x530000, dwReserved1=0x552f30, cFileName="PowerPointMUI.xml", cAlternateFileName="POWERP~1.XML")) returned 1 [0028.739] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x60) returned 0x552ed0 [0028.739] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x60) returned 0x552f38 [0028.740] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552f38 | out: hHeap=0x530000) returned 1 [0028.740] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20) returned 0x549570 [0028.740] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x549570 | out: hHeap=0x530000) returned 1 [0028.740] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ed0 | out: hHeap=0x530000) returned 1 [0028.740] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8) returned 0x547bb0 [0028.740] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8) returned 0x548070 [0028.740] AreFileApisANSI () returned 1 [0028.740] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38d728, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 82 [0028.740] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xa4) returned 0x552ed0 [0028.740] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38d728, cbMultiByte=-1, lpWideCharStr=0x552ed0, cchWideChar=82 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml") returned 82 [0028.740] CreateFileW (lpFileName="C:\\\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x38ce9c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6c [0028.740] GetFileType (hFile=0x6c) returned 0x1 [0028.740] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ed0 | out: hHeap=0x530000) returned 1 [0028.741] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cee8 | out: lpNewFilePointer=0x0) returned 1 [0028.741] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce9c | out: lpNewFilePointer=0x0) returned 1 [0028.741] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ced0 | out: lpNewFilePointer=0x0) returned 1 [0028.741] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ceb8 | out: lpNewFilePointer=0x0) returned 1 [0028.741] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce7c | out: lpNewFilePointer=0x0) returned 1 [0028.741] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ced0 | out: lpNewFilePointer=0x0) returned 1 [0028.741] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ceb8 | out: lpNewFilePointer=0x0) returned 1 [0028.742] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce7c | out: lpNewFilePointer=0x0) returned 1 [0028.742] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x558c60 [0028.742] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x5aa, lpOverlapped=0x0) returned 1 [0028.745] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf2c | out: lpNewFilePointer=0x0) returned 1 [0028.745] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cef0 | out: lpNewFilePointer=0x0) returned 1 [0028.745] GetLastError () returned 0x0 [0028.745] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ceb8 | out: lpNewFilePointer=0x0) returned 1 [0028.745] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce4c | out: lpNewFilePointer=0x0) returned 1 [0028.745] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x8, lpNewFilePointer=0x0, dwMoveMethod=0x38cec8 | out: lpNewFilePointer=0x0) returned 1 [0028.745] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce7c | out: lpNewFilePointer=0x0) returned 1 [0028.746] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x5a2, lpOverlapped=0x0) returned 1 [0028.746] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf2c | out: lpNewFilePointer=0x0) returned 1 [0028.746] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec0 | out: lpNewFilePointer=0x0) returned 1 [0028.746] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x8, lpNewFilePointer=0x0, dwMoveMethod=0x38cf3c | out: lpNewFilePointer=0x0) returned 1 [0028.746] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cef0 | out: lpNewFilePointer=0x0) returned 1 [0028.746] GetLastError () returned 0x0 [0028.746] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ceb8 | out: lpNewFilePointer=0x0) returned 1 [0028.746] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce4c | out: lpNewFilePointer=0x0) returned 1 [0028.746] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x10, lpNewFilePointer=0x0, dwMoveMethod=0x38cec8 | out: lpNewFilePointer=0x0) returned 1 [0028.747] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce7c | out: lpNewFilePointer=0x0) returned 1 [0028.747] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x59a, lpOverlapped=0x0) returned 1 [0028.747] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf2c | out: lpNewFilePointer=0x0) returned 1 [0028.747] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec0 | out: lpNewFilePointer=0x0) returned 1 [0028.747] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x10, lpNewFilePointer=0x0, dwMoveMethod=0x38cf3c | out: lpNewFilePointer=0x0) returned 1 [0028.747] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cef0 | out: lpNewFilePointer=0x0) returned 1 [0028.747] GetLastError () returned 0x0 [0028.747] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ceb8 | out: lpNewFilePointer=0x0) returned 1 [0028.747] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce4c | out: lpNewFilePointer=0x0) returned 1 [0028.747] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x18, lpNewFilePointer=0x0, dwMoveMethod=0x38cec8 | out: lpNewFilePointer=0x0) returned 1 [0028.748] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce7c | out: lpNewFilePointer=0x0) returned 1 [0028.748] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x592, lpOverlapped=0x0) returned 1 [0028.748] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf2c | out: lpNewFilePointer=0x0) returned 1 [0028.748] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec0 | out: lpNewFilePointer=0x0) returned 1 [0028.748] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x18, lpNewFilePointer=0x0, dwMoveMethod=0x38cf3c | out: lpNewFilePointer=0x0) returned 1 [0028.748] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cef0 | out: lpNewFilePointer=0x0) returned 1 [0028.748] GetLastError () returned 0x0 [0028.750] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ceb8 | out: lpNewFilePointer=0x0) returned 1 [0028.750] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce4c | out: lpNewFilePointer=0x0) returned 1 [0028.750] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x20, lpNewFilePointer=0x0, dwMoveMethod=0x38cec8 | out: lpNewFilePointer=0x0) returned 1 [0028.750] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce7c | out: lpNewFilePointer=0x0) returned 1 [0028.750] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x58a, lpOverlapped=0x0) returned 1 [0028.750] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf2c | out: lpNewFilePointer=0x0) returned 1 [0028.750] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec0 | out: lpNewFilePointer=0x0) returned 1 [0028.751] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x20, lpNewFilePointer=0x0, dwMoveMethod=0x38cf3c | out: lpNewFilePointer=0x0) returned 1 [0028.751] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cef0 | out: lpNewFilePointer=0x0) returned 1 [0028.751] GetLastError () returned 0x0 [0028.751] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ceb8 | out: lpNewFilePointer=0x0) returned 1 [0028.751] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce4c | out: lpNewFilePointer=0x0) returned 1 [0028.751] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x28, lpNewFilePointer=0x0, dwMoveMethod=0x38cec8 | out: lpNewFilePointer=0x0) returned 1 [0028.751] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce7c | out: lpNewFilePointer=0x0) returned 1 [0028.751] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x582, lpOverlapped=0x0) returned 1 [0028.751] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf2c | out: lpNewFilePointer=0x0) returned 1 [0028.752] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec0 | out: lpNewFilePointer=0x0) returned 1 [0028.752] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x28, lpNewFilePointer=0x0, dwMoveMethod=0x38cf3c | out: lpNewFilePointer=0x0) returned 1 [0028.752] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cef0 | out: lpNewFilePointer=0x0) returned 1 [0028.752] GetLastError () returned 0x0 [0028.752] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ceb8 | out: lpNewFilePointer=0x0) returned 1 [0028.752] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce4c | out: lpNewFilePointer=0x0) returned 1 [0028.752] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x30, lpNewFilePointer=0x0, dwMoveMethod=0x38cec8 | out: lpNewFilePointer=0x0) returned 1 [0028.752] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce7c | out: lpNewFilePointer=0x0) returned 1 [0028.752] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x57a, lpOverlapped=0x0) returned 1 [0028.753] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf2c | out: lpNewFilePointer=0x0) returned 1 [0028.753] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec0 | out: lpNewFilePointer=0x0) returned 1 [0028.753] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x30, lpNewFilePointer=0x0, dwMoveMethod=0x38cf3c | out: lpNewFilePointer=0x0) returned 1 [0028.753] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cef0 | out: lpNewFilePointer=0x0) returned 1 [0028.753] GetLastError () returned 0x0 [0028.753] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ceb8 | out: lpNewFilePointer=0x0) returned 1 [0028.753] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce4c | out: lpNewFilePointer=0x0) returned 1 [0028.753] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x38, lpNewFilePointer=0x0, dwMoveMethod=0x38cec8 | out: lpNewFilePointer=0x0) returned 1 [0028.753] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce7c | out: lpNewFilePointer=0x0) returned 1 [0028.754] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x572, lpOverlapped=0x0) returned 1 [0028.754] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf2c | out: lpNewFilePointer=0x0) returned 1 [0028.754] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec0 | out: lpNewFilePointer=0x0) returned 1 [0028.754] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x38, lpNewFilePointer=0x0, dwMoveMethod=0x38cf3c | out: lpNewFilePointer=0x0) returned 1 [0028.754] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cef0 | out: lpNewFilePointer=0x0) returned 1 [0028.754] GetLastError () returned 0x0 [0028.754] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ceb8 | out: lpNewFilePointer=0x0) returned 1 [0028.754] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce4c | out: lpNewFilePointer=0x0) returned 1 [0028.755] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x40, lpNewFilePointer=0x0, dwMoveMethod=0x38cec8 | out: lpNewFilePointer=0x0) returned 1 [0028.755] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce7c | out: lpNewFilePointer=0x0) returned 1 [0028.755] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x56a, lpOverlapped=0x0) returned 1 [0028.755] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf2c | out: lpNewFilePointer=0x0) returned 1 [0028.755] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec0 | out: lpNewFilePointer=0x0) returned 1 [0028.755] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x40, lpNewFilePointer=0x0, dwMoveMethod=0x38cf3c | out: lpNewFilePointer=0x0) returned 1 [0028.755] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cef0 | out: lpNewFilePointer=0x0) returned 1 [0028.755] GetLastError () returned 0x0 [0028.756] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ceb8 | out: lpNewFilePointer=0x0) returned 1 [0028.756] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce4c | out: lpNewFilePointer=0x0) returned 1 [0028.756] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x48, lpNewFilePointer=0x0, dwMoveMethod=0x38cec8 | out: lpNewFilePointer=0x0) returned 1 [0028.756] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce7c | out: lpNewFilePointer=0x0) returned 1 [0028.756] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x562, lpOverlapped=0x0) returned 1 [0028.756] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf2c | out: lpNewFilePointer=0x0) returned 1 [0028.756] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec0 | out: lpNewFilePointer=0x0) returned 1 [0028.756] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x48, lpNewFilePointer=0x0, dwMoveMethod=0x38cf3c | out: lpNewFilePointer=0x0) returned 1 [0028.756] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cef0 | out: lpNewFilePointer=0x0) returned 1 [0028.757] GetLastError () returned 0x0 [0028.757] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ceb8 | out: lpNewFilePointer=0x0) returned 1 [0028.757] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce4c | out: lpNewFilePointer=0x0) returned 1 [0028.757] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x50, lpNewFilePointer=0x0, dwMoveMethod=0x38cec8 | out: lpNewFilePointer=0x0) returned 1 [0028.757] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce7c | out: lpNewFilePointer=0x0) returned 1 [0028.758] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x55a, lpOverlapped=0x0) returned 1 [0028.758] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf2c | out: lpNewFilePointer=0x0) returned 1 [0028.759] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec0 | out: lpNewFilePointer=0x0) returned 1 [0028.759] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x50, lpNewFilePointer=0x0, dwMoveMethod=0x38cf3c | out: lpNewFilePointer=0x0) returned 1 [0028.759] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cef0 | out: lpNewFilePointer=0x0) returned 1 [0028.759] GetLastError () returned 0x0 [0028.759] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ceb8 | out: lpNewFilePointer=0x0) returned 1 [0028.759] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce4c | out: lpNewFilePointer=0x0) returned 1 [0028.759] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x58, lpNewFilePointer=0x0, dwMoveMethod=0x38cec8 | out: lpNewFilePointer=0x0) returned 1 [0028.759] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce7c | out: lpNewFilePointer=0x0) returned 1 [0028.759] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x552, lpOverlapped=0x0) returned 1 [0028.760] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf2c | out: lpNewFilePointer=0x0) returned 1 [0028.760] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec0 | out: lpNewFilePointer=0x0) returned 1 [0028.760] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x58, lpNewFilePointer=0x0, dwMoveMethod=0x38cf3c | out: lpNewFilePointer=0x0) returned 1 [0028.760] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cef0 | out: lpNewFilePointer=0x0) returned 1 [0028.760] GetLastError () returned 0x0 [0028.760] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ceb8 | out: lpNewFilePointer=0x0) returned 1 [0028.760] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce4c | out: lpNewFilePointer=0x0) returned 1 [0028.760] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x60, lpNewFilePointer=0x0, dwMoveMethod=0x38cec8 | out: lpNewFilePointer=0x0) returned 1 [0028.760] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce7c | out: lpNewFilePointer=0x0) returned 1 [0028.761] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x54a, lpOverlapped=0x0) returned 1 [0028.761] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf2c | out: lpNewFilePointer=0x0) returned 1 [0028.761] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec0 | out: lpNewFilePointer=0x0) returned 1 [0028.761] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x60, lpNewFilePointer=0x0, dwMoveMethod=0x38cf3c | out: lpNewFilePointer=0x0) returned 1 [0028.762] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cef0 | out: lpNewFilePointer=0x0) returned 1 [0028.762] GetLastError () returned 0x0 [0028.762] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ceb8 | out: lpNewFilePointer=0x0) returned 1 [0028.762] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce4c | out: lpNewFilePointer=0x0) returned 1 [0028.762] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x68, lpNewFilePointer=0x0, dwMoveMethod=0x38cec8 | out: lpNewFilePointer=0x0) returned 1 [0028.762] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce7c | out: lpNewFilePointer=0x0) returned 1 [0028.762] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x542, lpOverlapped=0x0) returned 1 [0028.762] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf2c | out: lpNewFilePointer=0x0) returned 1 [0028.762] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec0 | out: lpNewFilePointer=0x0) returned 1 [0028.762] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x68, lpNewFilePointer=0x0, dwMoveMethod=0x38cf3c | out: lpNewFilePointer=0x0) returned 1 [0028.763] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cef0 | out: lpNewFilePointer=0x0) returned 1 [0028.763] GetLastError () returned 0x0 [0028.763] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ceb8 | out: lpNewFilePointer=0x0) returned 1 [0028.763] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce4c | out: lpNewFilePointer=0x0) returned 1 [0028.763] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x70, lpNewFilePointer=0x0, dwMoveMethod=0x38cec8 | out: lpNewFilePointer=0x0) returned 1 [0028.763] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce7c | out: lpNewFilePointer=0x0) returned 1 [0028.763] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x53a, lpOverlapped=0x0) returned 1 [0028.764] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf2c | out: lpNewFilePointer=0x0) returned 1 [0028.764] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec0 | out: lpNewFilePointer=0x0) returned 1 [0028.764] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x70, lpNewFilePointer=0x0, dwMoveMethod=0x38cf3c | out: lpNewFilePointer=0x0) returned 1 [0028.764] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cef0 | out: lpNewFilePointer=0x0) returned 1 [0028.764] GetLastError () returned 0x0 [0028.764] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ceb8 | out: lpNewFilePointer=0x0) returned 1 [0028.765] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce4c | out: lpNewFilePointer=0x0) returned 1 [0028.765] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x78, lpNewFilePointer=0x0, dwMoveMethod=0x38cec8 | out: lpNewFilePointer=0x0) returned 1 [0028.765] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce7c | out: lpNewFilePointer=0x0) returned 1 [0028.765] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x532, lpOverlapped=0x0) returned 1 [0028.765] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf2c | out: lpNewFilePointer=0x0) returned 1 [0028.765] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec0 | out: lpNewFilePointer=0x0) returned 1 [0028.765] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x78, lpNewFilePointer=0x0, dwMoveMethod=0x38cf3c | out: lpNewFilePointer=0x0) returned 1 [0028.766] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cef0 | out: lpNewFilePointer=0x0) returned 1 [0028.766] GetLastError () returned 0x0 [0028.766] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ceb8 | out: lpNewFilePointer=0x0) returned 1 [0028.766] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce4c | out: lpNewFilePointer=0x0) returned 1 [0028.766] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x80, lpNewFilePointer=0x0, dwMoveMethod=0x38cec8 | out: lpNewFilePointer=0x0) returned 1 [0028.766] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce7c | out: lpNewFilePointer=0x0) returned 1 [0028.766] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x52a, lpOverlapped=0x0) returned 1 [0028.766] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf2c | out: lpNewFilePointer=0x0) returned 1 [0028.767] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec0 | out: lpNewFilePointer=0x0) returned 1 [0028.767] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x80, lpNewFilePointer=0x0, dwMoveMethod=0x38cf3c | out: lpNewFilePointer=0x0) returned 1 [0028.767] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cef0 | out: lpNewFilePointer=0x0) returned 1 [0028.767] GetLastError () returned 0x0 [0028.767] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ceb8 | out: lpNewFilePointer=0x0) returned 1 [0028.767] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce4c | out: lpNewFilePointer=0x0) returned 1 [0028.767] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x88, lpNewFilePointer=0x0, dwMoveMethod=0x38cec8 | out: lpNewFilePointer=0x0) returned 1 [0028.767] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce7c | out: lpNewFilePointer=0x0) returned 1 [0028.768] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x522, lpOverlapped=0x0) returned 1 [0028.768] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf2c | out: lpNewFilePointer=0x0) returned 1 [0028.768] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec0 | out: lpNewFilePointer=0x0) returned 1 [0028.768] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x88, lpNewFilePointer=0x0, dwMoveMethod=0x38cf3c | out: lpNewFilePointer=0x0) returned 1 [0028.768] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cef0 | out: lpNewFilePointer=0x0) returned 1 [0028.768] GetLastError () returned 0x0 [0028.768] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ceb8 | out: lpNewFilePointer=0x0) returned 1 [0028.768] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce4c | out: lpNewFilePointer=0x0) returned 1 [0028.768] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x90, lpNewFilePointer=0x0, dwMoveMethod=0x38cec8 | out: lpNewFilePointer=0x0) returned 1 [0028.768] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce7c | out: lpNewFilePointer=0x0) returned 1 [0028.769] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x51a, lpOverlapped=0x0) returned 1 [0028.769] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf2c | out: lpNewFilePointer=0x0) returned 1 [0028.769] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec0 | out: lpNewFilePointer=0x0) returned 1 [0028.769] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x90, lpNewFilePointer=0x0, dwMoveMethod=0x38cf3c | out: lpNewFilePointer=0x0) returned 1 [0028.769] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cef0 | out: lpNewFilePointer=0x0) returned 1 [0028.769] GetLastError () returned 0x0 [0028.769] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ceb8 | out: lpNewFilePointer=0x0) returned 1 [0028.769] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce4c | out: lpNewFilePointer=0x0) returned 1 [0028.769] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x98, lpNewFilePointer=0x0, dwMoveMethod=0x38cec8 | out: lpNewFilePointer=0x0) returned 1 [0028.769] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce7c | out: lpNewFilePointer=0x0) returned 1 [0028.770] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x512, lpOverlapped=0x0) returned 1 [0028.770] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf2c | out: lpNewFilePointer=0x0) returned 1 [0028.770] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec0 | out: lpNewFilePointer=0x0) returned 1 [0028.770] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x98, lpNewFilePointer=0x0, dwMoveMethod=0x38cf3c | out: lpNewFilePointer=0x0) returned 1 [0028.770] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cef0 | out: lpNewFilePointer=0x0) returned 1 [0028.770] GetLastError () returned 0x0 [0028.770] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ceb8 | out: lpNewFilePointer=0x0) returned 1 [0028.770] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce4c | out: lpNewFilePointer=0x0) returned 1 [0028.770] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0xa0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec8 | out: lpNewFilePointer=0x0) returned 1 [0028.770] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce7c | out: lpNewFilePointer=0x0) returned 1 [0028.771] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x50a, lpOverlapped=0x0) returned 1 [0028.771] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf2c | out: lpNewFilePointer=0x0) returned 1 [0028.771] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec0 | out: lpNewFilePointer=0x0) returned 1 [0028.771] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0xa0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf3c | out: lpNewFilePointer=0x0) returned 1 [0028.771] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cef0 | out: lpNewFilePointer=0x0) returned 1 [0028.771] GetLastError () returned 0x0 [0028.771] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ceb8 | out: lpNewFilePointer=0x0) returned 1 [0028.771] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce4c | out: lpNewFilePointer=0x0) returned 1 [0028.772] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0xa8, lpNewFilePointer=0x0, dwMoveMethod=0x38cec8 | out: lpNewFilePointer=0x0) returned 1 [0028.772] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce7c | out: lpNewFilePointer=0x0) returned 1 [0028.772] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x502, lpOverlapped=0x0) returned 1 [0028.772] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf2c | out: lpNewFilePointer=0x0) returned 1 [0028.772] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec0 | out: lpNewFilePointer=0x0) returned 1 [0028.772] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0xa8, lpNewFilePointer=0x0, dwMoveMethod=0x38cf3c | out: lpNewFilePointer=0x0) returned 1 [0028.773] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cef0 | out: lpNewFilePointer=0x0) returned 1 [0028.773] GetLastError () returned 0x0 [0028.773] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ceb8 | out: lpNewFilePointer=0x0) returned 1 [0028.773] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce4c | out: lpNewFilePointer=0x0) returned 1 [0028.773] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0xb0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec8 | out: lpNewFilePointer=0x0) returned 1 [0028.773] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce7c | out: lpNewFilePointer=0x0) returned 1 [0028.773] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x4fa, lpOverlapped=0x0) returned 1 [0028.774] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf2c | out: lpNewFilePointer=0x0) returned 1 [0028.774] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec0 | out: lpNewFilePointer=0x0) returned 1 [0028.774] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0xb0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf3c | out: lpNewFilePointer=0x0) returned 1 [0028.774] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cef0 | out: lpNewFilePointer=0x0) returned 1 [0028.774] GetLastError () returned 0x0 [0028.774] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ceb8 | out: lpNewFilePointer=0x0) returned 1 [0028.774] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce4c | out: lpNewFilePointer=0x0) returned 1 [0028.774] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0xb8, lpNewFilePointer=0x0, dwMoveMethod=0x38cec8 | out: lpNewFilePointer=0x0) returned 1 [0028.774] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce7c | out: lpNewFilePointer=0x0) returned 1 [0028.774] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x4f2, lpOverlapped=0x0) returned 1 [0028.775] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf2c | out: lpNewFilePointer=0x0) returned 1 [0028.775] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec0 | out: lpNewFilePointer=0x0) returned 1 [0028.775] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0xb8, lpNewFilePointer=0x0, dwMoveMethod=0x38cf3c | out: lpNewFilePointer=0x0) returned 1 [0028.775] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cef0 | out: lpNewFilePointer=0x0) returned 1 [0028.775] GetLastError () returned 0x0 [0028.775] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ceb8 | out: lpNewFilePointer=0x0) returned 1 [0028.775] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce4c | out: lpNewFilePointer=0x0) returned 1 [0028.775] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0xc0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec8 | out: lpNewFilePointer=0x0) returned 1 [0028.775] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce7c | out: lpNewFilePointer=0x0) returned 1 [0028.775] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x4ea, lpOverlapped=0x0) returned 1 [0028.776] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf2c | out: lpNewFilePointer=0x0) returned 1 [0028.776] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec0 | out: lpNewFilePointer=0x0) returned 1 [0028.776] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0xc0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf3c | out: lpNewFilePointer=0x0) returned 1 [0028.776] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cef0 | out: lpNewFilePointer=0x0) returned 1 [0028.776] GetLastError () returned 0x0 [0028.776] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ceb8 | out: lpNewFilePointer=0x0) returned 1 [0028.776] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce4c | out: lpNewFilePointer=0x0) returned 1 [0028.776] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0xc8, lpNewFilePointer=0x0, dwMoveMethod=0x38cec8 | out: lpNewFilePointer=0x0) returned 1 [0028.776] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce7c | out: lpNewFilePointer=0x0) returned 1 [0028.777] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x4e2, lpOverlapped=0x0) returned 1 [0028.777] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf2c | out: lpNewFilePointer=0x0) returned 1 [0028.777] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec0 | out: lpNewFilePointer=0x0) returned 1 [0028.777] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0xc8, lpNewFilePointer=0x0, dwMoveMethod=0x38cf3c | out: lpNewFilePointer=0x0) returned 1 [0028.777] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cef0 | out: lpNewFilePointer=0x0) returned 1 [0028.777] GetLastError () returned 0x0 [0028.777] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ceb8 | out: lpNewFilePointer=0x0) returned 1 [0028.777] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce4c | out: lpNewFilePointer=0x0) returned 1 [0028.777] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0xd0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec8 | out: lpNewFilePointer=0x0) returned 1 [0028.777] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce7c | out: lpNewFilePointer=0x0) returned 1 [0028.777] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x4da, lpOverlapped=0x0) returned 1 [0028.778] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf2c | out: lpNewFilePointer=0x0) returned 1 [0028.778] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec0 | out: lpNewFilePointer=0x0) returned 1 [0028.778] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0xd0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf3c | out: lpNewFilePointer=0x0) returned 1 [0028.778] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cef0 | out: lpNewFilePointer=0x0) returned 1 [0028.778] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ceb8 | out: lpNewFilePointer=0x0) returned 1 [0028.778] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce4c | out: lpNewFilePointer=0x0) returned 1 [0028.778] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0xd8, lpNewFilePointer=0x0, dwMoveMethod=0x38cec8 | out: lpNewFilePointer=0x0) returned 1 [0028.778] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce7c | out: lpNewFilePointer=0x0) returned 1 [0028.778] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x4d2, lpOverlapped=0x0) returned 1 [0028.778] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf2c | out: lpNewFilePointer=0x0) returned 1 [0028.778] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec0 | out: lpNewFilePointer=0x0) returned 1 [0028.778] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0xd8, lpNewFilePointer=0x0, dwMoveMethod=0x38cf3c | out: lpNewFilePointer=0x0) returned 1 [0028.778] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cef0 | out: lpNewFilePointer=0x0) returned 1 [0028.779] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ceb8 | out: lpNewFilePointer=0x0) returned 1 [0028.779] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce4c | out: lpNewFilePointer=0x0) returned 1 [0028.779] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0xe0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec8 | out: lpNewFilePointer=0x0) returned 1 [0028.779] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce7c | out: lpNewFilePointer=0x0) returned 1 [0028.779] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x4ca, lpOverlapped=0x0) returned 1 [0028.779] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf2c | out: lpNewFilePointer=0x0) returned 1 [0028.779] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec0 | out: lpNewFilePointer=0x0) returned 1 [0028.779] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0xe0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf3c | out: lpNewFilePointer=0x0) returned 1 [0028.779] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cef0 | out: lpNewFilePointer=0x0) returned 1 [0028.779] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ceb8 | out: lpNewFilePointer=0x0) returned 1 [0028.779] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce4c | out: lpNewFilePointer=0x0) returned 1 [0028.779] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0xe8, lpNewFilePointer=0x0, dwMoveMethod=0x38cec8 | out: lpNewFilePointer=0x0) returned 1 [0028.779] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce7c | out: lpNewFilePointer=0x0) returned 1 [0028.779] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x4c2, lpOverlapped=0x0) returned 1 [0028.780] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf2c | out: lpNewFilePointer=0x0) returned 1 [0028.780] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec0 | out: lpNewFilePointer=0x0) returned 1 [0028.780] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0xe8, lpNewFilePointer=0x0, dwMoveMethod=0x38cf3c | out: lpNewFilePointer=0x0) returned 1 [0028.780] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cef0 | out: lpNewFilePointer=0x0) returned 1 [0028.780] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ceb8 | out: lpNewFilePointer=0x0) returned 1 [0028.780] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce4c | out: lpNewFilePointer=0x0) returned 1 [0028.781] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0xf0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec8 | out: lpNewFilePointer=0x0) returned 1 [0028.781] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce7c | out: lpNewFilePointer=0x0) returned 1 [0028.781] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x4ba, lpOverlapped=0x0) returned 1 [0028.781] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf2c | out: lpNewFilePointer=0x0) returned 1 [0028.781] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec0 | out: lpNewFilePointer=0x0) returned 1 [0028.781] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0xf0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf3c | out: lpNewFilePointer=0x0) returned 1 [0028.781] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x4b2, lpOverlapped=0x0) returned 1 [0028.781] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x4aa, lpOverlapped=0x0) returned 1 [0028.781] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x4a2, lpOverlapped=0x0) returned 1 [0028.782] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x49a, lpOverlapped=0x0) returned 1 [0028.782] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x492, lpOverlapped=0x0) returned 1 [0028.782] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x48a, lpOverlapped=0x0) returned 1 [0028.782] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x482, lpOverlapped=0x0) returned 1 [0028.782] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x47a, lpOverlapped=0x0) returned 1 [0028.782] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x472, lpOverlapped=0x0) returned 1 [0028.782] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x46a, lpOverlapped=0x0) returned 1 [0028.782] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x462, lpOverlapped=0x0) returned 1 [0028.782] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x45a, lpOverlapped=0x0) returned 1 [0028.782] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x452, lpOverlapped=0x0) returned 1 [0028.782] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x44a, lpOverlapped=0x0) returned 1 [0028.782] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x442, lpOverlapped=0x0) returned 1 [0028.783] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x43a, lpOverlapped=0x0) returned 1 [0028.783] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x432, lpOverlapped=0x0) returned 1 [0028.783] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x42a, lpOverlapped=0x0) returned 1 [0028.783] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x422, lpOverlapped=0x0) returned 1 [0028.783] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x41a, lpOverlapped=0x0) returned 1 [0028.783] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x412, lpOverlapped=0x0) returned 1 [0028.783] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x40a, lpOverlapped=0x0) returned 1 [0028.783] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x402, lpOverlapped=0x0) returned 1 [0028.783] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x3fa, lpOverlapped=0x0) returned 1 [0028.783] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x3f2, lpOverlapped=0x0) returned 1 [0028.783] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x3ea, lpOverlapped=0x0) returned 1 [0028.784] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x3e2, lpOverlapped=0x0) returned 1 [0028.784] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x3da, lpOverlapped=0x0) returned 1 [0028.784] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x3d2, lpOverlapped=0x0) returned 1 [0028.784] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x3ca, lpOverlapped=0x0) returned 1 [0028.784] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x3c2, lpOverlapped=0x0) returned 1 [0028.784] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x3ba, lpOverlapped=0x0) returned 1 [0028.784] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x3b2, lpOverlapped=0x0) returned 1 [0028.784] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x3aa, lpOverlapped=0x0) returned 1 [0028.784] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x3a2, lpOverlapped=0x0) returned 1 [0028.784] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x39a, lpOverlapped=0x0) returned 1 [0028.784] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x392, lpOverlapped=0x0) returned 1 [0028.785] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x38a, lpOverlapped=0x0) returned 1 [0028.785] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x382, lpOverlapped=0x0) returned 1 [0028.785] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x37a, lpOverlapped=0x0) returned 1 [0028.785] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x372, lpOverlapped=0x0) returned 1 [0028.785] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x36a, lpOverlapped=0x0) returned 1 [0028.785] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x362, lpOverlapped=0x0) returned 1 [0028.785] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x35a, lpOverlapped=0x0) returned 1 [0028.785] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x352, lpOverlapped=0x0) returned 1 [0028.785] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x34a, lpOverlapped=0x0) returned 1 [0028.785] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x342, lpOverlapped=0x0) returned 1 [0028.785] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x33a, lpOverlapped=0x0) returned 1 [0028.785] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x332, lpOverlapped=0x0) returned 1 [0028.786] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x32a, lpOverlapped=0x0) returned 1 [0028.786] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x322, lpOverlapped=0x0) returned 1 [0028.786] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x31a, lpOverlapped=0x0) returned 1 [0028.786] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x312, lpOverlapped=0x0) returned 1 [0028.786] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x30a, lpOverlapped=0x0) returned 1 [0028.786] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x302, lpOverlapped=0x0) returned 1 [0028.786] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x2fa, lpOverlapped=0x0) returned 1 [0028.786] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x2f2, lpOverlapped=0x0) returned 1 [0028.786] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x2ea, lpOverlapped=0x0) returned 1 [0028.786] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x2e2, lpOverlapped=0x0) returned 1 [0028.786] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x2da, lpOverlapped=0x0) returned 1 [0028.787] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x2d2, lpOverlapped=0x0) returned 1 [0028.787] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x2ca, lpOverlapped=0x0) returned 1 [0028.787] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x2c2, lpOverlapped=0x0) returned 1 [0028.787] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x2ba, lpOverlapped=0x0) returned 1 [0028.787] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x2b2, lpOverlapped=0x0) returned 1 [0028.787] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x2aa, lpOverlapped=0x0) returned 1 [0028.787] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x2a2, lpOverlapped=0x0) returned 1 [0028.787] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x29a, lpOverlapped=0x0) returned 1 [0028.787] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x292, lpOverlapped=0x0) returned 1 [0028.787] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x28a, lpOverlapped=0x0) returned 1 [0028.787] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x282, lpOverlapped=0x0) returned 1 [0028.788] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x27a, lpOverlapped=0x0) returned 1 [0028.788] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x272, lpOverlapped=0x0) returned 1 [0028.788] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x26a, lpOverlapped=0x0) returned 1 [0028.788] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x262, lpOverlapped=0x0) returned 1 [0028.788] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x25a, lpOverlapped=0x0) returned 1 [0028.788] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x252, lpOverlapped=0x0) returned 1 [0028.788] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x24a, lpOverlapped=0x0) returned 1 [0028.788] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x242, lpOverlapped=0x0) returned 1 [0028.788] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x23a, lpOverlapped=0x0) returned 1 [0028.788] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x232, lpOverlapped=0x0) returned 1 [0028.788] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x22a, lpOverlapped=0x0) returned 1 [0028.788] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x222, lpOverlapped=0x0) returned 1 [0028.789] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x21a, lpOverlapped=0x0) returned 1 [0028.789] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x212, lpOverlapped=0x0) returned 1 [0028.789] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x20a, lpOverlapped=0x0) returned 1 [0028.789] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x202, lpOverlapped=0x0) returned 1 [0028.789] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x1fa, lpOverlapped=0x0) returned 1 [0028.789] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x1f2, lpOverlapped=0x0) returned 1 [0028.789] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x1ea, lpOverlapped=0x0) returned 1 [0028.789] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x1e2, lpOverlapped=0x0) returned 1 [0028.789] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x1da, lpOverlapped=0x0) returned 1 [0028.789] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x1d2, lpOverlapped=0x0) returned 1 [0028.789] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x1ca, lpOverlapped=0x0) returned 1 [0028.790] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x1c2, lpOverlapped=0x0) returned 1 [0028.790] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x1ba, lpOverlapped=0x0) returned 1 [0028.790] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x1b2, lpOverlapped=0x0) returned 1 [0028.790] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x1aa, lpOverlapped=0x0) returned 1 [0028.790] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x1a2, lpOverlapped=0x0) returned 1 [0028.790] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x19a, lpOverlapped=0x0) returned 1 [0028.790] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x192, lpOverlapped=0x0) returned 1 [0028.790] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x18a, lpOverlapped=0x0) returned 1 [0028.790] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x182, lpOverlapped=0x0) returned 1 [0028.790] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x17a, lpOverlapped=0x0) returned 1 [0028.790] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x172, lpOverlapped=0x0) returned 1 [0028.790] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x16a, lpOverlapped=0x0) returned 1 [0028.791] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x162, lpOverlapped=0x0) returned 1 [0028.791] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x15a, lpOverlapped=0x0) returned 1 [0028.791] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x152, lpOverlapped=0x0) returned 1 [0028.791] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x14a, lpOverlapped=0x0) returned 1 [0028.791] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x142, lpOverlapped=0x0) returned 1 [0028.791] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x13a, lpOverlapped=0x0) returned 1 [0028.791] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x132, lpOverlapped=0x0) returned 1 [0028.791] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x12a, lpOverlapped=0x0) returned 1 [0028.791] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x122, lpOverlapped=0x0) returned 1 [0028.791] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x11a, lpOverlapped=0x0) returned 1 [0028.791] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x112, lpOverlapped=0x0) returned 1 [0028.791] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x10a, lpOverlapped=0x0) returned 1 [0028.792] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x102, lpOverlapped=0x0) returned 1 [0028.792] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0xfa, lpOverlapped=0x0) returned 1 [0028.792] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0xf2, lpOverlapped=0x0) returned 1 [0028.792] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0xea, lpOverlapped=0x0) returned 1 [0028.792] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0xe2, lpOverlapped=0x0) returned 1 [0028.792] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0xda, lpOverlapped=0x0) returned 1 [0028.792] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0xd2, lpOverlapped=0x0) returned 1 [0028.792] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0xca, lpOverlapped=0x0) returned 1 [0028.792] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0xc2, lpOverlapped=0x0) returned 1 [0028.792] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0xba, lpOverlapped=0x0) returned 1 [0028.792] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0xb2, lpOverlapped=0x0) returned 1 [0028.792] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0xaa, lpOverlapped=0x0) returned 1 [0028.792] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0xa2, lpOverlapped=0x0) returned 1 [0028.793] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x9a, lpOverlapped=0x0) returned 1 [0028.793] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x92, lpOverlapped=0x0) returned 1 [0028.793] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x8a, lpOverlapped=0x0) returned 1 [0028.793] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x82, lpOverlapped=0x0) returned 1 [0028.793] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x7a, lpOverlapped=0x0) returned 1 [0028.793] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x72, lpOverlapped=0x0) returned 1 [0028.793] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x6a, lpOverlapped=0x0) returned 1 [0028.793] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x62, lpOverlapped=0x0) returned 1 [0028.793] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x5a, lpOverlapped=0x0) returned 1 [0028.793] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x52, lpOverlapped=0x0) returned 1 [0028.793] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x4a, lpOverlapped=0x0) returned 1 [0028.793] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x42, lpOverlapped=0x0) returned 1 [0028.793] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x3a, lpOverlapped=0x0) returned 1 [0028.793] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x32, lpOverlapped=0x0) returned 1 [0028.794] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x2a, lpOverlapped=0x0) returned 1 [0028.794] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x22, lpOverlapped=0x0) returned 1 [0028.794] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x1a, lpOverlapped=0x0) returned 1 [0028.794] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x12, lpOverlapped=0x0) returned 1 [0028.794] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0xa, lpOverlapped=0x0) returned 1 [0028.794] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x2, lpOverlapped=0x0) returned 1 [0028.794] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x0, lpOverlapped=0x0) returned 1 [0028.794] AreFileApisANSI () returned 1 [0028.794] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38d728, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 82 [0028.794] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x552f38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0028.794] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x156) returned 0x552fa0 [0028.794] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38d728, cbMultiByte=-1, lpWideCharStr=0x552fa0, cchWideChar=82 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml") returned 82 [0028.794] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x552f38, cbMultiByte=-1, lpWideCharStr=0x553044, cchWideChar=89 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml.masked") returned 89 [0028.794] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml.masked" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.xml.masked"), dwFlags=0x2) returned 1 [0028.795] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552fa0 | out: hHeap=0x530000) returned 1 [0028.795] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552f38 | out: hHeap=0x530000) returned 1 [0028.795] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ed0 | out: hHeap=0x530000) returned 1 [0028.795] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548070 | out: hHeap=0x530000) returned 1 [0028.795] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547bb0 | out: hHeap=0x530000) returned 1 [0028.795] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2d523500, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x2d523500, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe8b079d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x431a290, dwReserved0=0xfffffffe, dwReserved1=0x7716387a, cFileName="PptLR.cab", cAlternateFileName="")) returned 1 [0028.795] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x50) returned 0x552ed0 [0028.795] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x50) returned 0x552f28 [0028.795] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552f28 | out: hHeap=0x530000) returned 1 [0028.795] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ed0 | out: hHeap=0x530000) returned 1 [0028.795] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x75e, dwReserved0=0x530000, dwReserved1=0x552f20, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0028.795] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x50) returned 0x552ed0 [0028.795] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x50) returned 0x552f28 [0028.795] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552f28 | out: hHeap=0x530000) returned 1 [0028.795] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ed0 | out: hHeap=0x530000) returned 1 [0028.795] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8) returned 0x547bb0 [0028.795] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8) returned 0x548070 [0028.796] AreFileApisANSI () returned 1 [0028.796] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38d728, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0028.796] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x94) returned 0x552ed0 [0028.796] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38d728, cbMultiByte=-1, lpWideCharStr=0x552ed0, cchWideChar=74 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 74 [0028.796] CreateFileW (lpFileName="C:\\\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x38ce9c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6c [0028.796] GetFileType (hFile=0x6c) returned 0x1 [0028.796] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ed0 | out: hHeap=0x530000) returned 1 [0028.796] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cee8 | out: lpNewFilePointer=0x0) returned 1 [0028.796] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce9c | out: lpNewFilePointer=0x0) returned 1 [0028.797] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ced0 | out: lpNewFilePointer=0x0) returned 1 [0028.797] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ceb8 | out: lpNewFilePointer=0x0) returned 1 [0028.797] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce7c | out: lpNewFilePointer=0x0) returned 1 [0028.797] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ced0 | out: lpNewFilePointer=0x0) returned 1 [0028.797] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ceb8 | out: lpNewFilePointer=0x0) returned 1 [0028.797] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce7c | out: lpNewFilePointer=0x0) returned 1 [0028.797] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x558c60 [0028.798] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x75e, lpOverlapped=0x0) returned 1 [0028.799] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf2c | out: lpNewFilePointer=0x0) returned 1 [0028.799] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cef0 | out: lpNewFilePointer=0x0) returned 1 [0028.799] GetLastError () returned 0x0 [0028.799] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ceb8 | out: lpNewFilePointer=0x0) returned 1 [0028.799] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce4c | out: lpNewFilePointer=0x0) returned 1 [0028.800] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x8, lpNewFilePointer=0x0, dwMoveMethod=0x38cec8 | out: lpNewFilePointer=0x0) returned 1 [0028.800] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce7c | out: lpNewFilePointer=0x0) returned 1 [0028.800] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x756, lpOverlapped=0x0) returned 1 [0028.800] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf2c | out: lpNewFilePointer=0x0) returned 1 [0028.800] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec0 | out: lpNewFilePointer=0x0) returned 1 [0028.800] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x8, lpNewFilePointer=0x0, dwMoveMethod=0x38cf3c | out: lpNewFilePointer=0x0) returned 1 [0028.800] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cef0 | out: lpNewFilePointer=0x0) returned 1 [0028.800] GetLastError () returned 0x0 [0028.800] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ceb8 | out: lpNewFilePointer=0x0) returned 1 [0028.801] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce4c | out: lpNewFilePointer=0x0) returned 1 [0028.801] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x10, lpNewFilePointer=0x0, dwMoveMethod=0x38cec8 | out: lpNewFilePointer=0x0) returned 1 [0028.801] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce7c | out: lpNewFilePointer=0x0) returned 1 [0028.801] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x74e, lpOverlapped=0x0) returned 1 [0028.801] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf2c | out: lpNewFilePointer=0x0) returned 1 [0028.801] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec0 | out: lpNewFilePointer=0x0) returned 1 [0028.801] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x10, lpNewFilePointer=0x0, dwMoveMethod=0x38cf3c | out: lpNewFilePointer=0x0) returned 1 [0028.801] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cef0 | out: lpNewFilePointer=0x0) returned 1 [0028.801] GetLastError () returned 0x0 [0028.802] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ceb8 | out: lpNewFilePointer=0x0) returned 1 [0028.802] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce4c | out: lpNewFilePointer=0x0) returned 1 [0028.802] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x18, lpNewFilePointer=0x0, dwMoveMethod=0x38cec8 | out: lpNewFilePointer=0x0) returned 1 [0028.802] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce7c | out: lpNewFilePointer=0x0) returned 1 [0028.802] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x746, lpOverlapped=0x0) returned 1 [0028.802] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf2c | out: lpNewFilePointer=0x0) returned 1 [0028.802] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec0 | out: lpNewFilePointer=0x0) returned 1 [0028.802] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x18, lpNewFilePointer=0x0, dwMoveMethod=0x38cf3c | out: lpNewFilePointer=0x0) returned 1 [0028.802] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cef0 | out: lpNewFilePointer=0x0) returned 1 [0028.802] GetLastError () returned 0x0 [0028.803] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ceb8 | out: lpNewFilePointer=0x0) returned 1 [0028.803] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce4c | out: lpNewFilePointer=0x0) returned 1 [0028.803] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x20, lpNewFilePointer=0x0, dwMoveMethod=0x38cec8 | out: lpNewFilePointer=0x0) returned 1 [0028.803] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce7c | out: lpNewFilePointer=0x0) returned 1 [0028.803] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x73e, lpOverlapped=0x0) returned 1 [0028.804] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf2c | out: lpNewFilePointer=0x0) returned 1 [0028.804] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec0 | out: lpNewFilePointer=0x0) returned 1 [0028.804] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x20, lpNewFilePointer=0x0, dwMoveMethod=0x38cf3c | out: lpNewFilePointer=0x0) returned 1 [0028.804] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cef0 | out: lpNewFilePointer=0x0) returned 1 [0028.804] GetLastError () returned 0x0 [0028.804] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ceb8 | out: lpNewFilePointer=0x0) returned 1 [0028.804] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce4c | out: lpNewFilePointer=0x0) returned 1 [0028.805] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x28, lpNewFilePointer=0x0, dwMoveMethod=0x38cec8 | out: lpNewFilePointer=0x0) returned 1 [0028.805] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce7c | out: lpNewFilePointer=0x0) returned 1 [0028.805] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x736, lpOverlapped=0x0) returned 1 [0028.805] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf2c | out: lpNewFilePointer=0x0) returned 1 [0028.805] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec0 | out: lpNewFilePointer=0x0) returned 1 [0028.805] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x28, lpNewFilePointer=0x0, dwMoveMethod=0x38cf3c | out: lpNewFilePointer=0x0) returned 1 [0028.805] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cef0 | out: lpNewFilePointer=0x0) returned 1 [0028.805] GetLastError () returned 0x0 [0028.805] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ceb8 | out: lpNewFilePointer=0x0) returned 1 [0028.805] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce4c | out: lpNewFilePointer=0x0) returned 1 [0028.806] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x30, lpNewFilePointer=0x0, dwMoveMethod=0x38cec8 | out: lpNewFilePointer=0x0) returned 1 [0028.806] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce7c | out: lpNewFilePointer=0x0) returned 1 [0028.806] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x72e, lpOverlapped=0x0) returned 1 [0028.806] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf2c | out: lpNewFilePointer=0x0) returned 1 [0028.806] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec0 | out: lpNewFilePointer=0x0) returned 1 [0028.806] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x30, lpNewFilePointer=0x0, dwMoveMethod=0x38cf3c | out: lpNewFilePointer=0x0) returned 1 [0028.806] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cef0 | out: lpNewFilePointer=0x0) returned 1 [0028.806] GetLastError () returned 0x0 [0028.806] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ceb8 | out: lpNewFilePointer=0x0) returned 1 [0028.807] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce4c | out: lpNewFilePointer=0x0) returned 1 [0028.807] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x38, lpNewFilePointer=0x0, dwMoveMethod=0x38cec8 | out: lpNewFilePointer=0x0) returned 1 [0028.807] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce7c | out: lpNewFilePointer=0x0) returned 1 [0028.807] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x726, lpOverlapped=0x0) returned 1 [0028.807] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf2c | out: lpNewFilePointer=0x0) returned 1 [0028.807] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec0 | out: lpNewFilePointer=0x0) returned 1 [0028.807] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x38, lpNewFilePointer=0x0, dwMoveMethod=0x38cf3c | out: lpNewFilePointer=0x0) returned 1 [0028.807] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cef0 | out: lpNewFilePointer=0x0) returned 1 [0028.807] GetLastError () returned 0x0 [0028.807] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ceb8 | out: lpNewFilePointer=0x0) returned 1 [0028.808] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce4c | out: lpNewFilePointer=0x0) returned 1 [0028.808] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x40, lpNewFilePointer=0x0, dwMoveMethod=0x38cec8 | out: lpNewFilePointer=0x0) returned 1 [0028.808] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce7c | out: lpNewFilePointer=0x0) returned 1 [0028.808] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x71e, lpOverlapped=0x0) returned 1 [0028.808] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf2c | out: lpNewFilePointer=0x0) returned 1 [0028.808] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec0 | out: lpNewFilePointer=0x0) returned 1 [0028.808] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x40, lpNewFilePointer=0x0, dwMoveMethod=0x38cf3c | out: lpNewFilePointer=0x0) returned 1 [0028.808] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cef0 | out: lpNewFilePointer=0x0) returned 1 [0028.808] GetLastError () returned 0x0 [0028.808] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ceb8 | out: lpNewFilePointer=0x0) returned 1 [0028.809] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce4c | out: lpNewFilePointer=0x0) returned 1 [0028.809] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x48, lpNewFilePointer=0x0, dwMoveMethod=0x38cec8 | out: lpNewFilePointer=0x0) returned 1 [0028.809] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce7c | out: lpNewFilePointer=0x0) returned 1 [0028.809] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x716, lpOverlapped=0x0) returned 1 [0028.809] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf2c | out: lpNewFilePointer=0x0) returned 1 [0028.809] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec0 | out: lpNewFilePointer=0x0) returned 1 [0028.809] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x48, lpNewFilePointer=0x0, dwMoveMethod=0x38cf3c | out: lpNewFilePointer=0x0) returned 1 [0028.809] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cef0 | out: lpNewFilePointer=0x0) returned 1 [0028.809] GetLastError () returned 0x0 [0028.810] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ceb8 | out: lpNewFilePointer=0x0) returned 1 [0028.810] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce4c | out: lpNewFilePointer=0x0) returned 1 [0028.810] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x50, lpNewFilePointer=0x0, dwMoveMethod=0x38cec8 | out: lpNewFilePointer=0x0) returned 1 [0028.810] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce7c | out: lpNewFilePointer=0x0) returned 1 [0028.810] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x70e, lpOverlapped=0x0) returned 1 [0028.810] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf2c | out: lpNewFilePointer=0x0) returned 1 [0028.810] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec0 | out: lpNewFilePointer=0x0) returned 1 [0028.810] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x50, lpNewFilePointer=0x0, dwMoveMethod=0x38cf3c | out: lpNewFilePointer=0x0) returned 1 [0028.810] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cef0 | out: lpNewFilePointer=0x0) returned 1 [0028.810] GetLastError () returned 0x0 [0028.811] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ceb8 | out: lpNewFilePointer=0x0) returned 1 [0028.811] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce4c | out: lpNewFilePointer=0x0) returned 1 [0028.811] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x58, lpNewFilePointer=0x0, dwMoveMethod=0x38cec8 | out: lpNewFilePointer=0x0) returned 1 [0028.811] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce7c | out: lpNewFilePointer=0x0) returned 1 [0028.811] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x706, lpOverlapped=0x0) returned 1 [0028.811] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf2c | out: lpNewFilePointer=0x0) returned 1 [0028.811] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec0 | out: lpNewFilePointer=0x0) returned 1 [0028.811] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x58, lpNewFilePointer=0x0, dwMoveMethod=0x38cf3c | out: lpNewFilePointer=0x0) returned 1 [0028.811] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cef0 | out: lpNewFilePointer=0x0) returned 1 [0028.812] GetLastError () returned 0x0 [0028.812] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ceb8 | out: lpNewFilePointer=0x0) returned 1 [0028.812] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce4c | out: lpNewFilePointer=0x0) returned 1 [0028.812] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x60, lpNewFilePointer=0x0, dwMoveMethod=0x38cec8 | out: lpNewFilePointer=0x0) returned 1 [0028.812] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce7c | out: lpNewFilePointer=0x0) returned 1 [0028.812] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x6fe, lpOverlapped=0x0) returned 1 [0028.812] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf2c | out: lpNewFilePointer=0x0) returned 1 [0028.812] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec0 | out: lpNewFilePointer=0x0) returned 1 [0028.812] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x60, lpNewFilePointer=0x0, dwMoveMethod=0x38cf3c | out: lpNewFilePointer=0x0) returned 1 [0028.812] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cef0 | out: lpNewFilePointer=0x0) returned 1 [0028.813] GetLastError () returned 0x0 [0028.813] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ceb8 | out: lpNewFilePointer=0x0) returned 1 [0028.813] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce4c | out: lpNewFilePointer=0x0) returned 1 [0028.813] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x68, lpNewFilePointer=0x0, dwMoveMethod=0x38cec8 | out: lpNewFilePointer=0x0) returned 1 [0028.813] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce7c | out: lpNewFilePointer=0x0) returned 1 [0028.813] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x6f6, lpOverlapped=0x0) returned 1 [0028.813] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf2c | out: lpNewFilePointer=0x0) returned 1 [0028.813] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec0 | out: lpNewFilePointer=0x0) returned 1 [0028.813] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x68, lpNewFilePointer=0x0, dwMoveMethod=0x38cf3c | out: lpNewFilePointer=0x0) returned 1 [0028.813] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cef0 | out: lpNewFilePointer=0x0) returned 1 [0028.814] GetLastError () returned 0x0 [0028.815] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ceb8 | out: lpNewFilePointer=0x0) returned 1 [0028.815] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce4c | out: lpNewFilePointer=0x0) returned 1 [0028.815] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x70, lpNewFilePointer=0x0, dwMoveMethod=0x38cec8 | out: lpNewFilePointer=0x0) returned 1 [0028.816] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce7c | out: lpNewFilePointer=0x0) returned 1 [0028.816] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x6ee, lpOverlapped=0x0) returned 1 [0028.816] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf2c | out: lpNewFilePointer=0x0) returned 1 [0028.816] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec0 | out: lpNewFilePointer=0x0) returned 1 [0028.816] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x70, lpNewFilePointer=0x0, dwMoveMethod=0x38cf3c | out: lpNewFilePointer=0x0) returned 1 [0028.816] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cef0 | out: lpNewFilePointer=0x0) returned 1 [0028.816] GetLastError () returned 0x0 [0028.816] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ceb8 | out: lpNewFilePointer=0x0) returned 1 [0028.816] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce4c | out: lpNewFilePointer=0x0) returned 1 [0028.816] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x78, lpNewFilePointer=0x0, dwMoveMethod=0x38cec8 | out: lpNewFilePointer=0x0) returned 1 [0028.817] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce7c | out: lpNewFilePointer=0x0) returned 1 [0028.817] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x6e6, lpOverlapped=0x0) returned 1 [0028.817] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf2c | out: lpNewFilePointer=0x0) returned 1 [0028.817] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec0 | out: lpNewFilePointer=0x0) returned 1 [0028.817] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x78, lpNewFilePointer=0x0, dwMoveMethod=0x38cf3c | out: lpNewFilePointer=0x0) returned 1 [0028.817] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cef0 | out: lpNewFilePointer=0x0) returned 1 [0028.817] GetLastError () returned 0x0 [0028.817] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ceb8 | out: lpNewFilePointer=0x0) returned 1 [0028.817] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce4c | out: lpNewFilePointer=0x0) returned 1 [0028.817] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x80, lpNewFilePointer=0x0, dwMoveMethod=0x38cec8 | out: lpNewFilePointer=0x0) returned 1 [0028.818] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce7c | out: lpNewFilePointer=0x0) returned 1 [0028.818] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x6de, lpOverlapped=0x0) returned 1 [0028.818] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf2c | out: lpNewFilePointer=0x0) returned 1 [0028.818] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec0 | out: lpNewFilePointer=0x0) returned 1 [0028.818] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x80, lpNewFilePointer=0x0, dwMoveMethod=0x38cf3c | out: lpNewFilePointer=0x0) returned 1 [0028.818] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cef0 | out: lpNewFilePointer=0x0) returned 1 [0028.818] GetLastError () returned 0x0 [0028.818] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ceb8 | out: lpNewFilePointer=0x0) returned 1 [0028.818] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce4c | out: lpNewFilePointer=0x0) returned 1 [0028.818] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x88, lpNewFilePointer=0x0, dwMoveMethod=0x38cec8 | out: lpNewFilePointer=0x0) returned 1 [0028.819] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce7c | out: lpNewFilePointer=0x0) returned 1 [0028.819] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x6d6, lpOverlapped=0x0) returned 1 [0028.819] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf2c | out: lpNewFilePointer=0x0) returned 1 [0028.819] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec0 | out: lpNewFilePointer=0x0) returned 1 [0028.819] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x88, lpNewFilePointer=0x0, dwMoveMethod=0x38cf3c | out: lpNewFilePointer=0x0) returned 1 [0028.819] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cef0 | out: lpNewFilePointer=0x0) returned 1 [0028.819] GetLastError () returned 0x0 [0028.819] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ceb8 | out: lpNewFilePointer=0x0) returned 1 [0028.819] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce4c | out: lpNewFilePointer=0x0) returned 1 [0028.819] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x90, lpNewFilePointer=0x0, dwMoveMethod=0x38cec8 | out: lpNewFilePointer=0x0) returned 1 [0028.820] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce7c | out: lpNewFilePointer=0x0) returned 1 [0028.820] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x6ce, lpOverlapped=0x0) returned 1 [0028.820] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf2c | out: lpNewFilePointer=0x0) returned 1 [0028.820] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec0 | out: lpNewFilePointer=0x0) returned 1 [0028.820] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x90, lpNewFilePointer=0x0, dwMoveMethod=0x38cf3c | out: lpNewFilePointer=0x0) returned 1 [0028.820] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cef0 | out: lpNewFilePointer=0x0) returned 1 [0028.820] GetLastError () returned 0x0 [0028.820] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ceb8 | out: lpNewFilePointer=0x0) returned 1 [0028.820] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce4c | out: lpNewFilePointer=0x0) returned 1 [0028.821] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x98, lpNewFilePointer=0x0, dwMoveMethod=0x38cec8 | out: lpNewFilePointer=0x0) returned 1 [0028.821] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce7c | out: lpNewFilePointer=0x0) returned 1 [0028.821] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x6c6, lpOverlapped=0x0) returned 1 [0028.821] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf2c | out: lpNewFilePointer=0x0) returned 1 [0028.821] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec0 | out: lpNewFilePointer=0x0) returned 1 [0028.821] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x98, lpNewFilePointer=0x0, dwMoveMethod=0x38cf3c | out: lpNewFilePointer=0x0) returned 1 [0028.821] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cef0 | out: lpNewFilePointer=0x0) returned 1 [0028.821] GetLastError () returned 0x0 [0028.821] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ceb8 | out: lpNewFilePointer=0x0) returned 1 [0028.821] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce4c | out: lpNewFilePointer=0x0) returned 1 [0028.822] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0xa0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec8 | out: lpNewFilePointer=0x0) returned 1 [0028.822] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce7c | out: lpNewFilePointer=0x0) returned 1 [0028.822] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x6be, lpOverlapped=0x0) returned 1 [0028.822] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf2c | out: lpNewFilePointer=0x0) returned 1 [0028.822] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec0 | out: lpNewFilePointer=0x0) returned 1 [0028.822] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0xa0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf3c | out: lpNewFilePointer=0x0) returned 1 [0028.822] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cef0 | out: lpNewFilePointer=0x0) returned 1 [0028.822] GetLastError () returned 0x0 [0028.822] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ceb8 | out: lpNewFilePointer=0x0) returned 1 [0028.822] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce4c | out: lpNewFilePointer=0x0) returned 1 [0028.823] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0xa8, lpNewFilePointer=0x0, dwMoveMethod=0x38cec8 | out: lpNewFilePointer=0x0) returned 1 [0028.823] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce7c | out: lpNewFilePointer=0x0) returned 1 [0028.823] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x6b6, lpOverlapped=0x0) returned 1 [0028.823] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf2c | out: lpNewFilePointer=0x0) returned 1 [0028.823] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec0 | out: lpNewFilePointer=0x0) returned 1 [0028.823] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0xa8, lpNewFilePointer=0x0, dwMoveMethod=0x38cf3c | out: lpNewFilePointer=0x0) returned 1 [0028.823] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cef0 | out: lpNewFilePointer=0x0) returned 1 [0028.823] GetLastError () returned 0x0 [0028.823] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ceb8 | out: lpNewFilePointer=0x0) returned 1 [0028.824] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce4c | out: lpNewFilePointer=0x0) returned 1 [0028.824] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0xb0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec8 | out: lpNewFilePointer=0x0) returned 1 [0028.824] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce7c | out: lpNewFilePointer=0x0) returned 1 [0028.824] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x6ae, lpOverlapped=0x0) returned 1 [0028.824] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf2c | out: lpNewFilePointer=0x0) returned 1 [0028.824] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec0 | out: lpNewFilePointer=0x0) returned 1 [0028.824] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0xb0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf3c | out: lpNewFilePointer=0x0) returned 1 [0028.824] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cef0 | out: lpNewFilePointer=0x0) returned 1 [0028.824] GetLastError () returned 0x0 [0028.824] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ceb8 | out: lpNewFilePointer=0x0) returned 1 [0028.825] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce4c | out: lpNewFilePointer=0x0) returned 1 [0028.825] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0xb8, lpNewFilePointer=0x0, dwMoveMethod=0x38cec8 | out: lpNewFilePointer=0x0) returned 1 [0028.825] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce7c | out: lpNewFilePointer=0x0) returned 1 [0028.825] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x6a6, lpOverlapped=0x0) returned 1 [0028.825] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf2c | out: lpNewFilePointer=0x0) returned 1 [0028.825] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec0 | out: lpNewFilePointer=0x0) returned 1 [0028.825] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0xb8, lpNewFilePointer=0x0, dwMoveMethod=0x38cf3c | out: lpNewFilePointer=0x0) returned 1 [0028.825] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cef0 | out: lpNewFilePointer=0x0) returned 1 [0028.825] GetLastError () returned 0x0 [0028.825] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ceb8 | out: lpNewFilePointer=0x0) returned 1 [0028.826] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce4c | out: lpNewFilePointer=0x0) returned 1 [0028.826] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0xc0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec8 | out: lpNewFilePointer=0x0) returned 1 [0028.826] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce7c | out: lpNewFilePointer=0x0) returned 1 [0028.826] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x69e, lpOverlapped=0x0) returned 1 [0028.826] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf2c | out: lpNewFilePointer=0x0) returned 1 [0028.826] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec0 | out: lpNewFilePointer=0x0) returned 1 [0028.826] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0xc0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf3c | out: lpNewFilePointer=0x0) returned 1 [0028.826] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cef0 | out: lpNewFilePointer=0x0) returned 1 [0028.826] GetLastError () returned 0x0 [0028.826] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ceb8 | out: lpNewFilePointer=0x0) returned 1 [0028.827] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce4c | out: lpNewFilePointer=0x0) returned 1 [0028.827] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0xc8, lpNewFilePointer=0x0, dwMoveMethod=0x38cec8 | out: lpNewFilePointer=0x0) returned 1 [0028.827] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce7c | out: lpNewFilePointer=0x0) returned 1 [0028.827] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x696, lpOverlapped=0x0) returned 1 [0028.827] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf2c | out: lpNewFilePointer=0x0) returned 1 [0028.827] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec0 | out: lpNewFilePointer=0x0) returned 1 [0028.827] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0xc8, lpNewFilePointer=0x0, dwMoveMethod=0x38cf3c | out: lpNewFilePointer=0x0) returned 1 [0028.827] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cef0 | out: lpNewFilePointer=0x0) returned 1 [0028.827] GetLastError () returned 0x0 [0028.828] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ceb8 | out: lpNewFilePointer=0x0) returned 1 [0028.828] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce4c | out: lpNewFilePointer=0x0) returned 1 [0028.828] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0xd0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec8 | out: lpNewFilePointer=0x0) returned 1 [0028.828] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce7c | out: lpNewFilePointer=0x0) returned 1 [0028.828] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x68e, lpOverlapped=0x0) returned 1 [0028.828] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf2c | out: lpNewFilePointer=0x0) returned 1 [0028.828] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec0 | out: lpNewFilePointer=0x0) returned 1 [0028.828] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0xd0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf3c | out: lpNewFilePointer=0x0) returned 1 [0028.828] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cef0 | out: lpNewFilePointer=0x0) returned 1 [0028.828] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ceb8 | out: lpNewFilePointer=0x0) returned 1 [0028.828] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce4c | out: lpNewFilePointer=0x0) returned 1 [0028.829] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0xd8, lpNewFilePointer=0x0, dwMoveMethod=0x38cec8 | out: lpNewFilePointer=0x0) returned 1 [0028.829] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce7c | out: lpNewFilePointer=0x0) returned 1 [0028.829] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x686, lpOverlapped=0x0) returned 1 [0028.829] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf2c | out: lpNewFilePointer=0x0) returned 1 [0028.829] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec0 | out: lpNewFilePointer=0x0) returned 1 [0028.829] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0xd8, lpNewFilePointer=0x0, dwMoveMethod=0x38cf3c | out: lpNewFilePointer=0x0) returned 1 [0028.829] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cef0 | out: lpNewFilePointer=0x0) returned 1 [0028.829] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ceb8 | out: lpNewFilePointer=0x0) returned 1 [0028.829] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce4c | out: lpNewFilePointer=0x0) returned 1 [0028.829] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0xe0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec8 | out: lpNewFilePointer=0x0) returned 1 [0028.829] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce7c | out: lpNewFilePointer=0x0) returned 1 [0028.829] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x67e, lpOverlapped=0x0) returned 1 [0028.829] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf2c | out: lpNewFilePointer=0x0) returned 1 [0028.830] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec0 | out: lpNewFilePointer=0x0) returned 1 [0028.830] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0xe0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf3c | out: lpNewFilePointer=0x0) returned 1 [0028.830] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cef0 | out: lpNewFilePointer=0x0) returned 1 [0028.830] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ceb8 | out: lpNewFilePointer=0x0) returned 1 [0028.830] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce4c | out: lpNewFilePointer=0x0) returned 1 [0028.830] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0xe8, lpNewFilePointer=0x0, dwMoveMethod=0x38cec8 | out: lpNewFilePointer=0x0) returned 1 [0028.830] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce7c | out: lpNewFilePointer=0x0) returned 1 [0028.830] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x676, lpOverlapped=0x0) returned 1 [0028.830] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf2c | out: lpNewFilePointer=0x0) returned 1 [0028.830] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec0 | out: lpNewFilePointer=0x0) returned 1 [0028.830] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0xe8, lpNewFilePointer=0x0, dwMoveMethod=0x38cf3c | out: lpNewFilePointer=0x0) returned 1 [0028.830] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cef0 | out: lpNewFilePointer=0x0) returned 1 [0028.830] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ceb8 | out: lpNewFilePointer=0x0) returned 1 [0028.830] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce4c | out: lpNewFilePointer=0x0) returned 1 [0028.831] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0xf0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec8 | out: lpNewFilePointer=0x0) returned 1 [0028.831] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38ce7c | out: lpNewFilePointer=0x0) returned 1 [0028.831] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x66e, lpOverlapped=0x0) returned 1 [0028.831] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf2c | out: lpNewFilePointer=0x0) returned 1 [0028.831] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cec0 | out: lpNewFilePointer=0x0) returned 1 [0028.831] SetFilePointerEx (in: hFile=0x6c, liDistanceToMove=0xf0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf3c | out: lpNewFilePointer=0x0) returned 1 [0028.831] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x666, lpOverlapped=0x0) returned 1 [0028.831] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x65e, lpOverlapped=0x0) returned 1 [0028.831] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x656, lpOverlapped=0x0) returned 1 [0028.831] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x64e, lpOverlapped=0x0) returned 1 [0028.831] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x646, lpOverlapped=0x0) returned 1 [0028.831] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x63e, lpOverlapped=0x0) returned 1 [0028.832] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x636, lpOverlapped=0x0) returned 1 [0028.832] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x62e, lpOverlapped=0x0) returned 1 [0028.832] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x626, lpOverlapped=0x0) returned 1 [0028.832] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x61e, lpOverlapped=0x0) returned 1 [0028.832] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x616, lpOverlapped=0x0) returned 1 [0028.832] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x60e, lpOverlapped=0x0) returned 1 [0028.832] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x606, lpOverlapped=0x0) returned 1 [0028.832] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x5fe, lpOverlapped=0x0) returned 1 [0028.832] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x5f6, lpOverlapped=0x0) returned 1 [0028.832] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x5ee, lpOverlapped=0x0) returned 1 [0028.832] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x5e6, lpOverlapped=0x0) returned 1 [0028.833] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x5de, lpOverlapped=0x0) returned 1 [0028.833] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x5d6, lpOverlapped=0x0) returned 1 [0028.833] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x5ce, lpOverlapped=0x0) returned 1 [0028.833] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x5c6, lpOverlapped=0x0) returned 1 [0028.833] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x5be, lpOverlapped=0x0) returned 1 [0028.833] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x5b6, lpOverlapped=0x0) returned 1 [0028.833] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x5ae, lpOverlapped=0x0) returned 1 [0028.833] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x5a6, lpOverlapped=0x0) returned 1 [0028.833] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x59e, lpOverlapped=0x0) returned 1 [0028.833] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x596, lpOverlapped=0x0) returned 1 [0028.833] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x58e, lpOverlapped=0x0) returned 1 [0028.834] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x586, lpOverlapped=0x0) returned 1 [0028.834] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x57e, lpOverlapped=0x0) returned 1 [0028.834] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x576, lpOverlapped=0x0) returned 1 [0028.834] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x56e, lpOverlapped=0x0) returned 1 [0028.834] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x566, lpOverlapped=0x0) returned 1 [0028.834] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x55e, lpOverlapped=0x0) returned 1 [0028.834] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x556, lpOverlapped=0x0) returned 1 [0028.834] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x54e, lpOverlapped=0x0) returned 1 [0028.834] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x546, lpOverlapped=0x0) returned 1 [0028.834] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x53e, lpOverlapped=0x0) returned 1 [0028.834] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x536, lpOverlapped=0x0) returned 1 [0028.835] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x52e, lpOverlapped=0x0) returned 1 [0028.835] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x526, lpOverlapped=0x0) returned 1 [0028.835] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x51e, lpOverlapped=0x0) returned 1 [0028.835] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x516, lpOverlapped=0x0) returned 1 [0028.835] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x50e, lpOverlapped=0x0) returned 1 [0028.835] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x506, lpOverlapped=0x0) returned 1 [0028.835] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x4fe, lpOverlapped=0x0) returned 1 [0028.835] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x4f6, lpOverlapped=0x0) returned 1 [0028.835] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x4ee, lpOverlapped=0x0) returned 1 [0028.835] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x4e6, lpOverlapped=0x0) returned 1 [0028.835] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x4de, lpOverlapped=0x0) returned 1 [0028.835] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x4d6, lpOverlapped=0x0) returned 1 [0028.836] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x4ce, lpOverlapped=0x0) returned 1 [0028.836] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x4c6, lpOverlapped=0x0) returned 1 [0028.836] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x4be, lpOverlapped=0x0) returned 1 [0028.836] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x4b6, lpOverlapped=0x0) returned 1 [0028.836] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x4ae, lpOverlapped=0x0) returned 1 [0028.836] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x4a6, lpOverlapped=0x0) returned 1 [0028.836] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x49e, lpOverlapped=0x0) returned 1 [0028.836] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x496, lpOverlapped=0x0) returned 1 [0028.836] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x48e, lpOverlapped=0x0) returned 1 [0028.836] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x486, lpOverlapped=0x0) returned 1 [0028.836] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x47e, lpOverlapped=0x0) returned 1 [0028.837] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x476, lpOverlapped=0x0) returned 1 [0028.837] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x46e, lpOverlapped=0x0) returned 1 [0028.837] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x466, lpOverlapped=0x0) returned 1 [0028.837] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x45e, lpOverlapped=0x0) returned 1 [0028.837] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x456, lpOverlapped=0x0) returned 1 [0028.837] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x44e, lpOverlapped=0x0) returned 1 [0028.837] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x446, lpOverlapped=0x0) returned 1 [0028.837] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x43e, lpOverlapped=0x0) returned 1 [0028.837] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x436, lpOverlapped=0x0) returned 1 [0028.837] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x42e, lpOverlapped=0x0) returned 1 [0028.837] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x426, lpOverlapped=0x0) returned 1 [0028.838] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x41e, lpOverlapped=0x0) returned 1 [0028.838] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x416, lpOverlapped=0x0) returned 1 [0028.838] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x40e, lpOverlapped=0x0) returned 1 [0028.838] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x406, lpOverlapped=0x0) returned 1 [0028.838] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x3fe, lpOverlapped=0x0) returned 1 [0028.838] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x3f6, lpOverlapped=0x0) returned 1 [0028.838] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x3ee, lpOverlapped=0x0) returned 1 [0028.838] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x3e6, lpOverlapped=0x0) returned 1 [0028.838] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x3de, lpOverlapped=0x0) returned 1 [0028.838] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x3d6, lpOverlapped=0x0) returned 1 [0028.838] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x3ce, lpOverlapped=0x0) returned 1 [0028.838] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x3c6, lpOverlapped=0x0) returned 1 [0028.839] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x3be, lpOverlapped=0x0) returned 1 [0028.839] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x3b6, lpOverlapped=0x0) returned 1 [0028.839] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x3ae, lpOverlapped=0x0) returned 1 [0028.839] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x3a6, lpOverlapped=0x0) returned 1 [0028.839] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x39e, lpOverlapped=0x0) returned 1 [0028.839] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x396, lpOverlapped=0x0) returned 1 [0028.839] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x38e, lpOverlapped=0x0) returned 1 [0028.840] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x386, lpOverlapped=0x0) returned 1 [0028.840] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x37e, lpOverlapped=0x0) returned 1 [0028.840] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x376, lpOverlapped=0x0) returned 1 [0028.840] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x36e, lpOverlapped=0x0) returned 1 [0028.840] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x366, lpOverlapped=0x0) returned 1 [0028.840] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x35e, lpOverlapped=0x0) returned 1 [0028.840] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x356, lpOverlapped=0x0) returned 1 [0028.840] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x34e, lpOverlapped=0x0) returned 1 [0028.840] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x346, lpOverlapped=0x0) returned 1 [0028.840] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x33e, lpOverlapped=0x0) returned 1 [0028.840] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x336, lpOverlapped=0x0) returned 1 [0028.841] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x32e, lpOverlapped=0x0) returned 1 [0028.841] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x326, lpOverlapped=0x0) returned 1 [0028.841] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x31e, lpOverlapped=0x0) returned 1 [0028.841] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x316, lpOverlapped=0x0) returned 1 [0028.841] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x30e, lpOverlapped=0x0) returned 1 [0028.841] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x306, lpOverlapped=0x0) returned 1 [0028.841] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x2fe, lpOverlapped=0x0) returned 1 [0028.841] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x2f6, lpOverlapped=0x0) returned 1 [0028.841] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x2ee, lpOverlapped=0x0) returned 1 [0028.841] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x2e6, lpOverlapped=0x0) returned 1 [0028.841] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x2de, lpOverlapped=0x0) returned 1 [0028.841] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x2d6, lpOverlapped=0x0) returned 1 [0028.842] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x2ce, lpOverlapped=0x0) returned 1 [0028.842] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x2c6, lpOverlapped=0x0) returned 1 [0028.842] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x2be, lpOverlapped=0x0) returned 1 [0028.842] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x2b6, lpOverlapped=0x0) returned 1 [0028.842] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x2ae, lpOverlapped=0x0) returned 1 [0028.842] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x2a6, lpOverlapped=0x0) returned 1 [0028.842] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x29e, lpOverlapped=0x0) returned 1 [0028.842] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x296, lpOverlapped=0x0) returned 1 [0028.842] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x28e, lpOverlapped=0x0) returned 1 [0028.842] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x286, lpOverlapped=0x0) returned 1 [0028.843] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x27e, lpOverlapped=0x0) returned 1 [0028.843] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x276, lpOverlapped=0x0) returned 1 [0028.843] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x26e, lpOverlapped=0x0) returned 1 [0028.844] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x266, lpOverlapped=0x0) returned 1 [0028.844] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x25e, lpOverlapped=0x0) returned 1 [0028.844] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x256, lpOverlapped=0x0) returned 1 [0028.844] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x24e, lpOverlapped=0x0) returned 1 [0028.844] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x246, lpOverlapped=0x0) returned 1 [0028.844] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x23e, lpOverlapped=0x0) returned 1 [0028.844] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x236, lpOverlapped=0x0) returned 1 [0028.844] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x22e, lpOverlapped=0x0) returned 1 [0028.844] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x226, lpOverlapped=0x0) returned 1 [0028.844] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x21e, lpOverlapped=0x0) returned 1 [0028.844] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x216, lpOverlapped=0x0) returned 1 [0028.844] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x20e, lpOverlapped=0x0) returned 1 [0028.845] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x206, lpOverlapped=0x0) returned 1 [0028.845] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x1fe, lpOverlapped=0x0) returned 1 [0028.845] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x1f6, lpOverlapped=0x0) returned 1 [0028.845] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x1ee, lpOverlapped=0x0) returned 1 [0028.845] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x1e6, lpOverlapped=0x0) returned 1 [0028.845] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x1de, lpOverlapped=0x0) returned 1 [0028.845] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x1d6, lpOverlapped=0x0) returned 1 [0028.845] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x1ce, lpOverlapped=0x0) returned 1 [0028.845] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x1c6, lpOverlapped=0x0) returned 1 [0028.845] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x1be, lpOverlapped=0x0) returned 1 [0028.846] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x1b6, lpOverlapped=0x0) returned 1 [0028.846] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x1ae, lpOverlapped=0x0) returned 1 [0028.846] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x1a6, lpOverlapped=0x0) returned 1 [0028.846] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x19e, lpOverlapped=0x0) returned 1 [0028.846] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x196, lpOverlapped=0x0) returned 1 [0028.846] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x18e, lpOverlapped=0x0) returned 1 [0028.846] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x186, lpOverlapped=0x0) returned 1 [0028.846] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x17e, lpOverlapped=0x0) returned 1 [0028.846] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x176, lpOverlapped=0x0) returned 1 [0028.846] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x16e, lpOverlapped=0x0) returned 1 [0028.846] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x166, lpOverlapped=0x0) returned 1 [0028.847] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x15e, lpOverlapped=0x0) returned 1 [0028.847] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x156, lpOverlapped=0x0) returned 1 [0028.847] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x14e, lpOverlapped=0x0) returned 1 [0028.847] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x146, lpOverlapped=0x0) returned 1 [0028.847] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x13e, lpOverlapped=0x0) returned 1 [0028.847] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x136, lpOverlapped=0x0) returned 1 [0028.847] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x12e, lpOverlapped=0x0) returned 1 [0028.847] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x126, lpOverlapped=0x0) returned 1 [0028.847] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x11e, lpOverlapped=0x0) returned 1 [0028.847] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x116, lpOverlapped=0x0) returned 1 [0028.847] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x10e, lpOverlapped=0x0) returned 1 [0028.848] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x106, lpOverlapped=0x0) returned 1 [0028.848] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0xfe, lpOverlapped=0x0) returned 1 [0028.848] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0xf6, lpOverlapped=0x0) returned 1 [0028.848] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0xee, lpOverlapped=0x0) returned 1 [0028.848] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0xe6, lpOverlapped=0x0) returned 1 [0028.848] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0xde, lpOverlapped=0x0) returned 1 [0028.848] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0xd6, lpOverlapped=0x0) returned 1 [0028.848] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0xce, lpOverlapped=0x0) returned 1 [0028.848] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0xc6, lpOverlapped=0x0) returned 1 [0028.848] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0xbe, lpOverlapped=0x0) returned 1 [0028.848] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0xb6, lpOverlapped=0x0) returned 1 [0028.848] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0xae, lpOverlapped=0x0) returned 1 [0028.849] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0xa6, lpOverlapped=0x0) returned 1 [0028.849] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x9e, lpOverlapped=0x0) returned 1 [0028.849] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x96, lpOverlapped=0x0) returned 1 [0028.849] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x8e, lpOverlapped=0x0) returned 1 [0028.849] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x86, lpOverlapped=0x0) returned 1 [0028.849] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x7e, lpOverlapped=0x0) returned 1 [0028.849] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x76, lpOverlapped=0x0) returned 1 [0028.849] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x6e, lpOverlapped=0x0) returned 1 [0028.849] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x66, lpOverlapped=0x0) returned 1 [0028.849] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x5e, lpOverlapped=0x0) returned 1 [0028.849] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x56, lpOverlapped=0x0) returned 1 [0028.850] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x4e, lpOverlapped=0x0) returned 1 [0028.850] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x46, lpOverlapped=0x0) returned 1 [0028.850] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x3e, lpOverlapped=0x0) returned 1 [0028.850] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x36, lpOverlapped=0x0) returned 1 [0028.850] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x2e, lpOverlapped=0x0) returned 1 [0028.850] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x26, lpOverlapped=0x0) returned 1 [0028.850] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x1e, lpOverlapped=0x0) returned 1 [0028.850] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x16, lpOverlapped=0x0) returned 1 [0028.850] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0xe, lpOverlapped=0x0) returned 1 [0028.850] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x6, lpOverlapped=0x0) returned 1 [0028.850] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x0, lpOverlapped=0x0) returned 1 [0028.851] AreFileApisANSI () returned 1 [0028.851] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38d728, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0028.851] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x552f28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0028.851] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x136) returned 0x552f90 [0028.851] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38d728, cbMultiByte=-1, lpWideCharStr=0x552f90, cchWideChar=74 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 74 [0028.851] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x552f28, cbMultiByte=-1, lpWideCharStr=0x553024, cchWideChar=81 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml.masked") returned 81 [0028.851] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml.masked" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\setup.xml.masked"), dwFlags=0x2) returned 1 [0028.852] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552f90 | out: hHeap=0x530000) returned 1 [0028.852] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552f28 | out: hHeap=0x530000) returned 1 [0028.852] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ed0 | out: hHeap=0x530000) returned 1 [0028.852] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548070 | out: hHeap=0x530000) returned 1 [0028.852] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547bb0 | out: hHeap=0x530000) returned 1 [0028.852] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x75e, dwReserved0=0x530000, dwReserved1=0x552f20, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0028.852] FindClose (in: hFindFile=0x547ad0 | out: hFindFile=0x547ad0) returned 1 [0028.852] FindNextFileA (in: hFindFile=0x552e90, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc3e6570, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc8a9170, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x38d9d4, dwReserved1=0x77163c74, cFileName="{90140000-0019-0409-1000-0000000FF1CE}-C", cAlternateFileName="{9877A~1")) returned 1 [0028.852] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x40) returned 0x548358 [0028.852] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x40) returned 0x5483e8 [0028.852] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x40) returned 0x5483a0 [0028.852] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5483e8 | out: hHeap=0x530000) returned 1 [0028.852] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5483a0 | out: hHeap=0x530000) returned 1 [0028.852] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548358 | out: hHeap=0x530000) returned 1 [0028.852] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x40) returned 0x548358 [0028.852] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x120) returned 0x552ed0 [0028.852] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x50) returned 0x552ff8 [0028.852] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x77) returned 0x5422e8 [0028.853] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ff8 | out: hHeap=0x530000) returned 1 [0028.853] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8) returned 0x547bb0 [0028.853] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8) returned 0x548070 [0028.853] AreFileApisANSI () returned 1 [0028.853] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5422e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0028.853] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xba) returned 0x552ff8 [0028.853] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5422e8, cbMultiByte=-1, lpWideCharStr=0x552ff8, cchWideChar=93 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\@@_OpenTheBrowserTOR_@@.html") returned 93 [0028.853] CreateFileW (lpFileName="C:\\\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\@@_OpenTheBrowserTOR_@@.html" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\@@_openthebrowsertor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x38cee8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x68 [0028.861] GetFileType (hFile=0x68) returned 0x1 [0028.861] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ff8 | out: hHeap=0x530000) returned 1 [0028.862] AreFileApisANSI () returned 1 [0028.862] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5422e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 98 [0028.862] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xc4) returned 0x552ff8 [0028.862] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5422e8, cbMultiByte=-1, lpWideCharStr=0x552ff8, cchWideChar=98 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html") returned 98 [0028.862] CreateFileW (lpFileName="C:\\\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\@@_îòêðûòü_â_áðàóçåðå_tor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x38cee8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x68 [0028.863] GetFileType (hFile=0x68) returned 0x1 [0028.863] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ff8 | out: hHeap=0x530000) returned 1 [0028.864] FindFirstFileA (in: lpFileName="C:\\\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc3e6570, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x64d83b00, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x64d83b00, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x76000472, dwReserved1=0xf1, cFileName=".", cAlternateFileName="")) returned 0x547ad0 [0028.864] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc3e6570, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x64d83b00, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x64d83b00, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x76000472, dwReserved1=0xf1, cFileName="..", cAlternateFileName="")) returned 1 [0028.864] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64d5d9a0, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x64d5d9a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x64d83b00, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x76000472, dwReserved1=0xf1, cFileName="@@_OpenTheBrowserTOR_@@.html", cAlternateFileName="@@_OPE~1.HTM")) returned 1 [0028.864] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x60) returned 0x552ed0 [0028.864] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x60) returned 0x552f38 [0028.864] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552f38 | out: hHeap=0x530000) returned 1 [0028.865] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20) returned 0x549570 [0028.865] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x549570 | out: hHeap=0x530000) returned 1 [0028.865] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ed0 | out: hHeap=0x530000) returned 1 [0028.865] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64d83b00, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x64d83b00, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x64d83b00, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x530000, dwReserved1=0x552f30, cFileName="@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html", cAlternateFileName="@@____~1.HTM")) returned 1 [0028.865] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x70) returned 0x552ed0 [0028.865] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x70) returned 0x552f48 [0028.865] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552f48 | out: hHeap=0x530000) returned 1 [0028.865] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x30) returned 0x548070 [0028.865] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548070 | out: hHeap=0x530000) returned 1 [0028.865] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ed0 | out: hHeap=0x530000) returned 1 [0028.865] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc40b730, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x265c00, dwReserved0=0x38d070, dwReserved1=0x77163c74, cFileName="PublisherMUI.msi", cAlternateFileName="PUBLIS~1.MSI")) returned 1 [0028.865] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x60) returned 0x552ed0 [0028.865] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x60) returned 0x552f38 [0028.865] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552f38 | out: hHeap=0x530000) returned 1 [0028.865] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ed0 | out: hHeap=0x530000) returned 1 [0028.865] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x530000, dwReserved1=0x552f30, cFileName="PublisherMUI.xml", cAlternateFileName="PUBLIS~1.XML")) returned 1 [0028.865] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x60) returned 0x552ed0 [0028.865] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x60) returned 0x552f38 [0028.865] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552f38 | out: hHeap=0x530000) returned 1 [0028.865] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20) returned 0x549570 [0028.865] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x549570 | out: hHeap=0x530000) returned 1 [0028.865] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ed0 | out: hHeap=0x530000) returned 1 [0028.865] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8) returned 0x547bb0 [0028.865] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8) returned 0x548070 [0028.866] AreFileApisANSI () returned 1 [0028.866] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38d728, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0028.866] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xa2) returned 0x552ed0 [0028.866] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38d728, cbMultiByte=-1, lpWideCharStr=0x552ed0, cchWideChar=81 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml") returned 81 [0028.866] CreateFileW (lpFileName="C:\\\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x38ce9c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6c [0028.867] GetFileType (hFile=0x6c) returned 0x1 [0028.867] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ed0 | out: hHeap=0x530000) returned 1 [0028.867] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x5aa, lpOverlapped=0x0) returned 1 [0028.869] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x5a2, lpOverlapped=0x0) returned 1 [0028.869] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x59a, lpOverlapped=0x0) returned 1 [0028.869] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x592, lpOverlapped=0x0) returned 1 [0028.869] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x58a, lpOverlapped=0x0) returned 1 [0028.869] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x582, lpOverlapped=0x0) returned 1 [0028.869] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x57a, lpOverlapped=0x0) returned 1 [0028.870] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x572, lpOverlapped=0x0) returned 1 [0028.870] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x56a, lpOverlapped=0x0) returned 1 [0028.870] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x562, lpOverlapped=0x0) returned 1 [0028.870] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x55a, lpOverlapped=0x0) returned 1 [0028.870] ReadFile (in: hFile=0x6c, lpBuffer=0x558c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38ce60, lpOverlapped=0x0 | out: lpBuffer=0x558c60*, lpNumberOfBytesRead=0x38ce60*=0x552, lpOverlapped=0x0) returned 1 [0028.872] AreFileApisANSI () returned 1 [0028.872] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38d728, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0028.872] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x552f38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 88 [0028.872] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x152) returned 0x552fa0 [0028.872] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38d728, cbMultiByte=-1, lpWideCharStr=0x552fa0, cchWideChar=81 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml") returned 81 [0028.872] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x552f38, cbMultiByte=-1, lpWideCharStr=0x553042, cchWideChar=88 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml.masked") returned 88 [0028.872] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml.masked" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.xml.masked"), dwFlags=0x2) returned 1 [0028.873] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552fa0 | out: hHeap=0x530000) returned 1 [0028.873] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552f38 | out: hHeap=0x530000) returned 1 [0028.873] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ed0 | out: hHeap=0x530000) returned 1 [0028.873] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548070 | out: hHeap=0x530000) returned 1 [0028.873] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547bb0 | out: hHeap=0x530000) returned 1 [0028.873] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3cd17e00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3cd17e00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc47e320, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x97f3f4, dwReserved0=0xfffffffe, dwReserved1=0x7716387a, cFileName="PubLR.cab", cAlternateFileName="")) returned 1 [0028.873] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x50) returned 0x552ed0 [0028.873] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x50) returned 0x552f28 [0028.873] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552f28 | out: hHeap=0x530000) returned 1 [0028.873] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ed0 | out: hHeap=0x530000) returned 1 [0028.873] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x648, dwReserved0=0x530000, dwReserved1=0x552f20, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0028.873] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x50) returned 0x552ed0 [0028.873] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x50) returned 0x552f28 [0028.873] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552f28 | out: hHeap=0x530000) returned 1 [0028.873] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ed0 | out: hHeap=0x530000) returned 1 [0028.873] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8) returned 0x547bb0 [0028.873] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8) returned 0x548070 [0028.873] AreFileApisANSI () returned 1 [0028.873] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38d728, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0028.873] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x94) returned 0x552ed0 [0028.874] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38d728, cbMultiByte=-1, lpWideCharStr=0x552ed0, cchWideChar=74 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 74 [0028.874] CreateFileW (lpFileName="C:\\\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x38ce9c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6c [0028.875] GetFileType (hFile=0x6c) returned 0x1 [0028.875] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ed0 | out: hHeap=0x530000) returned 1 [0028.882] AreFileApisANSI () returned 1 [0028.882] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38d728, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0028.882] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x552f28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0028.882] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x136) returned 0x552f90 [0028.883] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38d728, cbMultiByte=-1, lpWideCharStr=0x552f90, cchWideChar=74 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 74 [0028.883] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x552f28, cbMultiByte=-1, lpWideCharStr=0x553024, cchWideChar=81 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml.masked") returned 81 [0028.883] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml.masked" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\setup.xml.masked"), dwFlags=0x2) returned 1 [0028.883] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552f90 | out: hHeap=0x530000) returned 1 [0028.883] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552f28 | out: hHeap=0x530000) returned 1 [0028.883] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ed0 | out: hHeap=0x530000) returned 1 [0028.884] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548070 | out: hHeap=0x530000) returned 1 [0028.884] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547bb0 | out: hHeap=0x530000) returned 1 [0028.884] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x648, dwReserved0=0x530000, dwReserved1=0x552f20, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0028.884] FindClose (in: hFindFile=0x547ad0 | out: hFindFile=0x547ad0) returned 1 [0028.884] FindNextFileA (in: hFindFile=0x552e90, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee829690, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf00dbad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf00dbad0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x38d9d4, dwReserved1=0x77163c74, cFileName="{90140000-001A-0409-1000-0000000FF1CE}-C", cAlternateFileName="{9765F~1")) returned 1 [0028.884] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x40) returned 0x548358 [0028.884] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x40) returned 0x5483a0 [0028.884] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x40) returned 0x5483e8 [0028.884] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5483a0 | out: hHeap=0x530000) returned 1 [0028.884] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5483e8 | out: hHeap=0x530000) returned 1 [0028.884] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548358 | out: hHeap=0x530000) returned 1 [0028.884] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x40) returned 0x548358 [0028.884] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x120) returned 0x552ed0 [0028.884] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x50) returned 0x552ff8 [0028.884] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x77) returned 0x5422e8 [0028.884] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ff8 | out: hHeap=0x530000) returned 1 [0028.884] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8) returned 0x547bb0 [0028.884] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8) returned 0x548070 [0028.884] AreFileApisANSI () returned 1 [0028.885] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5422e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0028.885] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xba) returned 0x552ff8 [0028.885] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5422e8, cbMultiByte=-1, lpWideCharStr=0x552ff8, cchWideChar=93 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\@@_OpenTheBrowserTOR_@@.html") returned 93 [0028.885] CreateFileW (lpFileName="C:\\\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\@@_OpenTheBrowserTOR_@@.html" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\@@_openthebrowsertor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x38cee8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x68 [0028.889] GetFileType (hFile=0x68) returned 0x1 [0028.889] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ff8 | out: hHeap=0x530000) returned 1 [0028.890] AreFileApisANSI () returned 1 [0028.890] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5422e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 98 [0028.890] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xc4) returned 0x552ff8 [0028.890] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5422e8, cbMultiByte=-1, lpWideCharStr=0x552ff8, cchWideChar=98 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html") returned 98 [0028.890] CreateFileW (lpFileName="C:\\\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\@@_îòêðûòü_â_áðàóçåðå_tor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x38cee8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x68 [0028.891] GetFileType (hFile=0x68) returned 0x1 [0028.891] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ff8 | out: hHeap=0x530000) returned 1 [0028.892] FindFirstFileA (in: lpFileName="C:\\\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee829690, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x64dcfdc0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x64dcfdc0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x76000472, dwReserved1=0xf1, cFileName=".", cAlternateFileName="")) returned 0x547ad0 [0028.892] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee829690, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x64dcfdc0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x64dcfdc0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x76000472, dwReserved1=0xf1, cFileName="..", cAlternateFileName="")) returned 1 [0028.892] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64da9c60, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x64da9c60, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x64dcfdc0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x76000472, dwReserved1=0xf1, cFileName="@@_OpenTheBrowserTOR_@@.html", cAlternateFileName="@@_OPE~1.HTM")) returned 1 [0028.892] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x60) returned 0x552ed0 [0028.892] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x60) returned 0x552f38 [0028.892] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552f38 | out: hHeap=0x530000) returned 1 [0028.892] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20) returned 0x549570 [0028.892] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x549570 | out: hHeap=0x530000) returned 1 [0028.892] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ed0 | out: hHeap=0x530000) returned 1 [0028.893] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64dcfdc0, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x64dcfdc0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x64dcfdc0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x530000, dwReserved1=0x552f30, cFileName="@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html", cAlternateFileName="@@____~1.HTM")) returned 1 [0028.893] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x70) returned 0x552ed0 [0028.893] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x70) returned 0x552f48 [0028.893] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552f48 | out: hHeap=0x530000) returned 1 [0028.893] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x30) returned 0x548070 [0028.893] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548070 | out: hHeap=0x530000) returned 1 [0028.893] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ed0 | out: hHeap=0x530000) returned 1 [0028.893] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3a6f2400, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3a6f2400, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xeebe0180, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xe21fcc, dwReserved0=0x38d070, dwReserved1=0x77163c74, cFileName="OutlkLR.cab", cAlternateFileName="")) returned 1 [0028.893] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x50) returned 0x552ed0 [0028.893] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x50) returned 0x552f28 [0028.893] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552f28 | out: hHeap=0x530000) returned 1 [0028.893] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ed0 | out: hHeap=0x530000) returned 1 [0028.893] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee827f20, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2bba00, dwReserved0=0x530000, dwReserved1=0x552f20, cFileName="OutlookMUI.msi", cAlternateFileName="OUTLOO~1.MSI")) returned 1 [0028.893] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x50) returned 0x552ed0 [0028.893] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x50) returned 0x552f28 [0028.893] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552f28 | out: hHeap=0x530000) returned 1 [0028.893] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ed0 | out: hHeap=0x530000) returned 1 [0028.893] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee827f20, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xc72, dwReserved0=0x530000, dwReserved1=0x552f20, cFileName="OutlookMUI.xml", cAlternateFileName="OUTLOO~1.XML")) returned 1 [0028.893] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x50) returned 0x552ed0 [0028.893] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x50) returned 0x552f28 [0028.893] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552f28 | out: hHeap=0x530000) returned 1 [0028.893] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ed0 | out: hHeap=0x530000) returned 1 [0028.893] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8) returned 0x547bb0 [0028.893] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8) returned 0x548070 [0028.893] AreFileApisANSI () returned 1 [0028.893] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38d728, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0028.893] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x9e) returned 0x552ed0 [0028.893] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38d728, cbMultiByte=-1, lpWideCharStr=0x552ed0, cchWideChar=79 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml") returned 79 [0028.894] CreateFileW (lpFileName="C:\\\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x38ce9c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6c [0028.894] GetFileType (hFile=0x6c) returned 0x1 [0028.894] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ed0 | out: hHeap=0x530000) returned 1 [0028.899] AreFileApisANSI () returned 1 [0028.899] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38d728, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0028.900] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x552f28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 86 [0028.900] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x14a) returned 0x552f90 [0028.900] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38d728, cbMultiByte=-1, lpWideCharStr=0x552f90, cchWideChar=79 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml") returned 79 [0028.900] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x552f28, cbMultiByte=-1, lpWideCharStr=0x55302e, cchWideChar=86 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml.masked") returned 86 [0028.900] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml.masked" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.xml.masked"), dwFlags=0x2) returned 1 [0028.900] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552f90 | out: hHeap=0x530000) returned 1 [0028.900] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552f28 | out: hHeap=0x530000) returned 1 [0028.900] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ed0 | out: hHeap=0x530000) returned 1 [0028.900] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548070 | out: hHeap=0x530000) returned 1 [0028.900] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547bb0 | out: hHeap=0x530000) returned 1 [0028.900] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x106f, dwReserved0=0xfffffffe, dwReserved1=0x7716387a, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0028.901] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x50) returned 0x552ed0 [0028.901] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x50) returned 0x552f28 [0028.901] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552f28 | out: hHeap=0x530000) returned 1 [0028.901] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ed0 | out: hHeap=0x530000) returned 1 [0028.901] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8) returned 0x547bb0 [0028.901] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8) returned 0x548070 [0028.901] AreFileApisANSI () returned 1 [0028.901] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38d728, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0028.901] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x94) returned 0x552ed0 [0028.901] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38d728, cbMultiByte=-1, lpWideCharStr=0x552ed0, cchWideChar=74 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 74 [0028.901] CreateFileW (lpFileName="C:\\\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x38ce9c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6c [0028.902] GetFileType (hFile=0x6c) returned 0x1 [0028.902] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ed0 | out: hHeap=0x530000) returned 1 [0028.911] AreFileApisANSI () returned 1 [0028.911] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38d728, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0028.911] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x552f28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0028.911] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x136) returned 0x552f90 [0028.911] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38d728, cbMultiByte=-1, lpWideCharStr=0x552f90, cchWideChar=74 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 74 [0028.911] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x552f28, cbMultiByte=-1, lpWideCharStr=0x553024, cchWideChar=81 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml.masked") returned 81 [0028.911] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml.masked" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\setup.xml.masked"), dwFlags=0x2) returned 1 [0028.912] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552f90 | out: hHeap=0x530000) returned 1 [0028.912] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552f28 | out: hHeap=0x530000) returned 1 [0028.912] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ed0 | out: hHeap=0x530000) returned 1 [0028.912] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548070 | out: hHeap=0x530000) returned 1 [0028.912] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547bb0 | out: hHeap=0x530000) returned 1 [0028.912] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x106f, dwReserved0=0xfffffffe, dwReserved1=0x7716387a, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0028.912] FindClose (in: hFindFile=0x547ad0 | out: hFindFile=0x547ad0) returned 1 [0028.912] FindNextFileA (in: hFindFile=0x552e90, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfe076d70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfe076d70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x38d9d4, dwReserved1=0x77163c74, cFileName="{90140000-001B-0409-1000-0000000FF1CE}-C", cAlternateFileName="{94E50~1")) returned 1 [0028.913] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x40) returned 0x548358 [0028.913] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x40) returned 0x5483e8 [0028.913] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x40) returned 0x5483a0 [0028.913] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5483e8 | out: hHeap=0x530000) returned 1 [0028.913] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5483a0 | out: hHeap=0x530000) returned 1 [0028.913] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548358 | out: hHeap=0x530000) returned 1 [0028.913] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x40) returned 0x548358 [0028.913] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x120) returned 0x552ed0 [0028.913] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x50) returned 0x552ff8 [0028.913] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x77) returned 0x5422e8 [0028.913] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ff8 | out: hHeap=0x530000) returned 1 [0028.913] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8) returned 0x547bb0 [0028.913] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8) returned 0x548070 [0028.913] AreFileApisANSI () returned 1 [0028.913] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5422e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0028.913] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xba) returned 0x552ff8 [0028.913] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5422e8, cbMultiByte=-1, lpWideCharStr=0x552ff8, cchWideChar=93 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\@@_OpenTheBrowserTOR_@@.html") returned 93 [0028.913] CreateFileW (lpFileName="C:\\\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\@@_OpenTheBrowserTOR_@@.html" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\@@_openthebrowsertor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x38cee8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x68 [0028.918] GetFileType (hFile=0x68) returned 0x1 [0028.918] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ff8 | out: hHeap=0x530000) returned 1 [0028.919] AreFileApisANSI () returned 1 [0028.919] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5422e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 98 [0028.919] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xc4) returned 0x552ff8 [0028.919] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5422e8, cbMultiByte=-1, lpWideCharStr=0x552ff8, cchWideChar=98 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html") returned 98 [0028.919] CreateFileW (lpFileName="C:\\\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\@@_îòêðûòü_â_áðàóçåðå_tor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x38cee8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x68 [0028.920] GetFileType (hFile=0x68) returned 0x1 [0028.920] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ff8 | out: hHeap=0x530000) returned 1 [0028.921] FindFirstFileA (in: lpFileName="C:\\\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x64df5f20, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x64df5f20, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x76000472, dwReserved1=0xf1, cFileName=".", cAlternateFileName="")) returned 0x547ad0 [0028.921] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x64df5f20, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x64df5f20, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x76000472, dwReserved1=0xf1, cFileName="..", cAlternateFileName="")) returned 1 [0028.921] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64df5f20, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x64df5f20, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x64df5f20, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x76000472, dwReserved1=0xf1, cFileName="@@_OpenTheBrowserTOR_@@.html", cAlternateFileName="@@_OPE~1.HTM")) returned 1 [0028.921] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x60) returned 0x552ed0 [0028.922] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x60) returned 0x552f38 [0028.922] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552f38 | out: hHeap=0x530000) returned 1 [0028.922] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20) returned 0x549570 [0028.922] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x549570 | out: hHeap=0x530000) returned 1 [0028.922] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ed0 | out: hHeap=0x530000) returned 1 [0028.922] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64df5f20, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x64df5f20, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x64e1c080, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x530000, dwReserved1=0x552f30, cFileName="@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html", cAlternateFileName="@@____~1.HTM")) returned 1 [0028.922] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x70) returned 0x552ed0 [0028.922] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x70) returned 0x552f48 [0028.922] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552f48 | out: hHeap=0x530000) returned 1 [0028.922] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x30) returned 0x548070 [0028.922] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548070 | out: hHeap=0x530000) returned 1 [0028.922] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ed0 | out: hHeap=0x530000) returned 1 [0028.922] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfe076d70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x978, dwReserved0=0x38d070, dwReserved1=0x77163c74, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0028.922] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x50) returned 0x552ed0 [0028.922] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x50) returned 0x552f28 [0028.922] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552f28 | out: hHeap=0x530000) returned 1 [0028.922] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ed0 | out: hHeap=0x530000) returned 1 [0028.922] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8) returned 0x547bb0 [0028.922] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8) returned 0x548070 [0028.922] AreFileApisANSI () returned 1 [0028.922] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38d728, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0028.922] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x94) returned 0x552ed0 [0028.923] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38d728, cbMultiByte=-1, lpWideCharStr=0x552ed0, cchWideChar=74 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 74 [0028.923] CreateFileW (lpFileName="C:\\\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x38ce9c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6c [0028.923] GetFileType (hFile=0x6c) returned 0x1 [0028.923] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ed0 | out: hHeap=0x530000) returned 1 [0028.928] AreFileApisANSI () returned 1 [0028.928] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38d728, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0028.928] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x552f28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0028.928] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x136) returned 0x552f90 [0028.928] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38d728, cbMultiByte=-1, lpWideCharStr=0x552f90, cchWideChar=74 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 74 [0028.928] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x552f28, cbMultiByte=-1, lpWideCharStr=0x553024, cchWideChar=81 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml.masked") returned 81 [0028.928] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml.masked" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\setup.xml.masked"), dwFlags=0x2) returned 1 [0028.929] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552f90 | out: hHeap=0x530000) returned 1 [0028.929] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552f28 | out: hHeap=0x530000) returned 1 [0028.929] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ed0 | out: hHeap=0x530000) returned 1 [0028.929] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548070 | out: hHeap=0x530000) returned 1 [0028.929] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547bb0 | out: hHeap=0x530000) returned 1 [0028.929] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2fb48f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x2fb48f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc967850, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x29c6dbd, dwReserved0=0xfffffffe, dwReserved1=0x7716387a, cFileName="WordLR.cab", cAlternateFileName="")) returned 1 [0028.929] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x50) returned 0x552ed0 [0028.929] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x50) returned 0x552f28 [0028.929] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552f28 | out: hHeap=0x530000) returned 1 [0028.929] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ed0 | out: hHeap=0x530000) returned 1 [0028.929] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x267e00, dwReserved0=0x530000, dwReserved1=0x552f20, cFileName="WordMUI.msi", cAlternateFileName="")) returned 1 [0028.929] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x50) returned 0x552ed0 [0028.929] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x50) returned 0x552f28 [0028.929] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552f28 | out: hHeap=0x530000) returned 1 [0028.929] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ed0 | out: hHeap=0x530000) returned 1 [0028.929] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x708, dwReserved0=0x530000, dwReserved1=0x552f20, cFileName="WordMUI.xml", cAlternateFileName="")) returned 1 [0028.930] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x50) returned 0x552ed0 [0028.930] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x50) returned 0x552f28 [0028.930] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552f28 | out: hHeap=0x530000) returned 1 [0028.930] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ed0 | out: hHeap=0x530000) returned 1 [0028.930] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8) returned 0x547bb0 [0028.930] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8) returned 0x548070 [0028.930] AreFileApisANSI () returned 1 [0028.930] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38d728, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0028.930] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x98) returned 0x552ed0 [0028.930] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38d728, cbMultiByte=-1, lpWideCharStr=0x552ed0, cchWideChar=76 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml") returned 76 [0028.930] CreateFileW (lpFileName="C:\\\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x38ce9c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6c [0028.930] GetFileType (hFile=0x6c) returned 0x1 [0028.931] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ed0 | out: hHeap=0x530000) returned 1 [0028.935] AreFileApisANSI () returned 1 [0028.935] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38d728, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0028.935] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x552f28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 83 [0028.935] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x13e) returned 0x552f90 [0028.935] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38d728, cbMultiByte=-1, lpWideCharStr=0x552f90, cchWideChar=76 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml") returned 76 [0028.935] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x552f28, cbMultiByte=-1, lpWideCharStr=0x553028, cchWideChar=83 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml.masked") returned 83 [0028.935] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml.masked" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.xml.masked"), dwFlags=0x2) returned 1 [0028.936] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552f90 | out: hHeap=0x530000) returned 1 [0028.936] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552f28 | out: hHeap=0x530000) returned 1 [0028.936] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ed0 | out: hHeap=0x530000) returned 1 [0028.936] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548070 | out: hHeap=0x530000) returned 1 [0028.936] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547bb0 | out: hHeap=0x530000) returned 1 [0028.936] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x708, dwReserved0=0x530000, dwReserved1=0x552f20, cFileName="WordMUI.xml", cAlternateFileName="")) returned 0 [0028.936] FindClose (in: hFindFile=0x547ad0 | out: hFindFile=0x547ad0) returned 1 [0028.936] FindNextFileA (in: hFindFile=0x552e90, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf00dbad0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf58c8770, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf58c8770, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x38d9d4, dwReserved1=0x77163c74, cFileName="{90140000-002C-0409-1000-0000000FF1CE}-C", cAlternateFileName="{92787~1")) returned 1 [0028.936] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x40) returned 0x548358 [0028.936] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x40) returned 0x5483a0 [0028.936] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x40) returned 0x5483e8 [0028.936] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5483a0 | out: hHeap=0x530000) returned 1 [0028.937] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5483e8 | out: hHeap=0x530000) returned 1 [0028.937] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548358 | out: hHeap=0x530000) returned 1 [0028.937] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x40) returned 0x548358 [0028.937] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x120) returned 0x552ed0 [0028.937] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x50) returned 0x552ff8 [0028.937] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x77) returned 0x5422e8 [0028.937] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ff8 | out: hHeap=0x530000) returned 1 [0028.937] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8) returned 0x547bb0 [0028.937] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8) returned 0x548070 [0028.937] AreFileApisANSI () returned 1 [0028.937] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5422e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0028.937] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xba) returned 0x552ff8 [0028.937] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5422e8, cbMultiByte=-1, lpWideCharStr=0x552ff8, cchWideChar=93 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\@@_OpenTheBrowserTOR_@@.html") returned 93 [0028.937] CreateFileW (lpFileName="C:\\\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\@@_OpenTheBrowserTOR_@@.html" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\@@_openthebrowsertor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x38cee8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x68 [0028.941] GetFileType (hFile=0x68) returned 0x1 [0028.941] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ff8 | out: hHeap=0x530000) returned 1 [0028.942] AreFileApisANSI () returned 1 [0028.942] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5422e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 98 [0028.942] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xc4) returned 0x552ff8 [0028.942] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5422e8, cbMultiByte=-1, lpWideCharStr=0x552ff8, cchWideChar=98 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html") returned 98 [0028.942] CreateFileW (lpFileName="C:\\\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\@@_îòêðûòü_â_áðàóçåðå_tor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x38cee8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x68 [0028.944] GetFileType (hFile=0x68) returned 0x1 [0028.944] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ff8 | out: hHeap=0x530000) returned 1 [0028.945] FindFirstFileA (in: lpFileName="C:\\\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf00dbad0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x64e421e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x64e421e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x76000472, dwReserved1=0xf1, cFileName=".", cAlternateFileName="")) returned 0x547ad0 [0028.945] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf00dbad0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x64e421e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x64e421e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x76000472, dwReserved1=0xf1, cFileName="..", cAlternateFileName="")) returned 1 [0028.945] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64e421e0, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x64e421e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x64e421e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x76000472, dwReserved1=0xf1, cFileName="@@_OpenTheBrowserTOR_@@.html", cAlternateFileName="@@_OPE~1.HTM")) returned 1 [0028.945] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x60) returned 0x552ed0 [0028.945] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64e421e0, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x64e421e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x64e421e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x530000, dwReserved1=0x552f30, cFileName="@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html", cAlternateFileName="@@____~1.HTM")) returned 1 [0028.945] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf01c0310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf07b3a10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf07b3a10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x38d070, dwReserved1=0x77163c74, cFileName="Proof.en", cAlternateFileName="")) returned 1 [0028.945] AreFileApisANSI () returned 1 [0028.945] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5422e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 102 [0028.949] AreFileApisANSI () returned 1 [0028.949] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5422e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0028.952] FindFirstFileA (in: lpFileName="C:\\\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf01c0310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x64e421e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x64e421e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x73000271, dwReserved1=0xf1, cFileName=".", cAlternateFileName="")) returned 0x552f70 [0028.953] FindNextFileA (in: hFindFile=0x552f70, lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf01c0310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x64e421e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x64e421e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x73000271, dwReserved1=0xf1, cFileName="..", cAlternateFileName="")) returned 1 [0028.953] FindNextFileA (in: hFindFile=0x552f70, lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64e421e0, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x64e421e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x64e421e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x73000271, dwReserved1=0xf1, cFileName="@@_OpenTheBrowserTOR_@@.html", cAlternateFileName="@@_OPE~1.HTM")) returned 1 [0028.953] FindNextFileA (in: hFindFile=0x552f70, lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64e421e0, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x64e421e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x64e68340, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x530000, dwReserved1=0x559c60, cFileName="@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html", cAlternateFileName="@@____~1.HTM")) returned 1 [0028.953] FindNextFileA (in: hFindFile=0x552f70, lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x219b4a00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x219b4a00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf07b1ad0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xaf35ed, dwReserved0=0x38c70c, dwReserved1=0x77163c74, cFileName="Proof.cab", cAlternateFileName="")) returned 1 [0028.953] FindNextFileA (in: hFindFile=0x552f70, lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4db6cb00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x4db6cb00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf020c5d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd5c00, dwReserved0=0x530000, dwReserved1=0x559c60, cFileName="Proof.msi", cAlternateFileName="")) returned 1 [0028.953] FindNextFileA (in: hFindFile=0x552f70, lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa38b7300, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0xa38b7300, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf01be3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x543, dwReserved0=0x530000, dwReserved1=0x559c60, cFileName="Proof.xml", cAlternateFileName="")) returned 1 [0028.953] AreFileApisANSI () returned 1 [0028.953] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38cdc4, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 83 [0028.957] AreFileApisANSI () returned 1 [0028.957] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38cdc4, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 83 [0028.957] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x552fb0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 90 [0028.957] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml.masked" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.xml.masked"), dwFlags=0x2) returned 1 [0028.958] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x553018 | out: hHeap=0x530000) returned 1 [0028.958] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552fb0 | out: hHeap=0x530000) returned 1 [0028.958] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ed0 | out: hHeap=0x530000) returned 1 [0028.958] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548070 | out: hHeap=0x530000) returned 1 [0028.958] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547bb0 | out: hHeap=0x530000) returned 1 [0028.958] FindNextFileA (in: hFindFile=0x552f70, lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa38b7300, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0xa38b7300, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf01be3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x543, dwReserved0=0x530000, dwReserved1=0x559c60, cFileName="Proof.xml", cAlternateFileName="")) returned 0 [0028.958] FindClose (in: hFindFile=0x552f70 | out: hFindFile=0x552f70) returned 1 [0028.958] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf4d53d90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf4f690d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf4f690d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x530000, dwReserved1=0x552f20, cFileName="Proof.es", cAlternateFileName="")) returned 1 [0028.958] AreFileApisANSI () returned 1 [0028.958] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5422e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 102 [0028.960] AreFileApisANSI () returned 1 [0028.960] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5422e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0028.962] FindFirstFileA (in: lpFileName="C:\\\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf4d53d90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x64e68340, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x64e68340, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x77000671, dwReserved1=0xf1, cFileName=".", cAlternateFileName="")) returned 0x552f70 [0028.963] FindNextFileA (in: hFindFile=0x552f70, lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf4d53d90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x64e68340, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x64e68340, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x77000671, dwReserved1=0xf1, cFileName="..", cAlternateFileName="")) returned 1 [0028.963] FindNextFileA (in: hFindFile=0x552f70, lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64e68340, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x64e68340, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x64e68340, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x77000671, dwReserved1=0xf1, cFileName="@@_OpenTheBrowserTOR_@@.html", cAlternateFileName="@@_OPE~1.HTM")) returned 1 [0028.963] FindNextFileA (in: hFindFile=0x552f70, lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64e68340, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x64e68340, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x64e68340, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x530000, dwReserved1=0x552fa8, cFileName="@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html", cAlternateFileName="@@____~1.HTM")) returned 1 [0028.963] FindNextFileA (in: hFindFile=0x552f70, lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3ba05100, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3ba05100, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4f690d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd02aea, dwReserved0=0x38c70c, dwReserved1=0x77163c74, cFileName="Proof.cab", cAlternateFileName="")) returned 1 [0028.963] FindNextFileA (in: hFindFile=0x552f70, lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4e5c7f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd7200, dwReserved0=0x530000, dwReserved1=0x552fa8, cFileName="Proof.msi", cAlternateFileName="")) returned 1 [0028.963] FindNextFileA (in: hFindFile=0x552f70, lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4e37e00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b1, dwReserved0=0x530000, dwReserved1=0x552fa8, cFileName="Proof.xml", cAlternateFileName="")) returned 1 [0028.963] AreFileApisANSI () returned 1 [0028.963] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38cdc4, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 83 [0028.967] AreFileApisANSI () returned 1 [0028.967] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38cdc4, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 83 [0028.967] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x552fb0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 90 [0028.967] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml.masked" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.xml.masked"), dwFlags=0x2) returned 1 [0028.968] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x553018 | out: hHeap=0x530000) returned 1 [0028.968] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552fb0 | out: hHeap=0x530000) returned 1 [0028.968] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ed0 | out: hHeap=0x530000) returned 1 [0028.968] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548070 | out: hHeap=0x530000) returned 1 [0028.968] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547bb0 | out: hHeap=0x530000) returned 1 [0028.968] FindNextFileA (in: hFindFile=0x552f70, lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4e37e00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b1, dwReserved0=0x530000, dwReserved1=0x552fa8, cFileName="Proof.xml", cAlternateFileName="")) returned 0 [0028.968] FindClose (in: hFindFile=0x552f70 | out: hFindFile=0x552f70) returned 1 [0028.968] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf2bda830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf30772d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf30772d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x530000, dwReserved1=0x552f20, cFileName="Proof.fr", cAlternateFileName="")) returned 1 [0028.968] AreFileApisANSI () returned 1 [0028.968] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5422e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 102 [0028.970] AreFileApisANSI () returned 1 [0028.970] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5422e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0028.976] FindFirstFileA (in: lpFileName="C:\\\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf2bda830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x64e8e4a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x64e8e4a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x77000671, dwReserved1=0xf1, cFileName=".", cAlternateFileName="")) returned 0x552f70 [0028.976] FindNextFileA (in: hFindFile=0x552f70, lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf2bda830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x64e8e4a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x64e8e4a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x77000671, dwReserved1=0xf1, cFileName="..", cAlternateFileName="")) returned 1 [0028.976] FindNextFileA (in: hFindFile=0x552f70, lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64e8e4a0, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x64e8e4a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x64e8e4a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x77000671, dwReserved1=0xf1, cFileName="@@_OpenTheBrowserTOR_@@.html", cAlternateFileName="@@_OPE~1.HTM")) returned 1 [0028.976] FindNextFileA (in: hFindFile=0x552f70, lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64e8e4a0, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x64e8e4a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x64e8e4a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x530000, dwReserved1=0x552fa8, cFileName="@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html", cAlternateFileName="@@____~1.HTM")) returned 1 [0028.976] FindNextFileA (in: hFindFile=0x552f70, lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x35aa7000, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x35aa7000, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf3076b00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1416b54, dwReserved0=0x38c70c, dwReserved1=0x77163c74, cFileName="Proof.cab", cAlternateFileName="")) returned 1 [0028.976] FindNextFileA (in: hFindFile=0x552f70, lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf2e3b660, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd8400, dwReserved0=0x530000, dwReserved1=0x552fa8, cFileName="Proof.msi", cAlternateFileName="")) returned 1 [0028.976] FindNextFileA (in: hFindFile=0x552f70, lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf2bd90c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x530000, dwReserved1=0x552fa8, cFileName="Proof.xml", cAlternateFileName="")) returned 1 [0028.976] AreFileApisANSI () returned 1 [0028.977] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38cdc4, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 83 [0028.980] AreFileApisANSI () returned 1 [0028.980] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38cdc4, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 83 [0028.980] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x552fb0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 90 [0028.980] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml.masked" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.xml.masked"), dwFlags=0x2) returned 1 [0028.981] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x553018 | out: hHeap=0x530000) returned 1 [0028.981] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552fb0 | out: hHeap=0x530000) returned 1 [0028.981] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ed0 | out: hHeap=0x530000) returned 1 [0028.981] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548070 | out: hHeap=0x530000) returned 1 [0028.981] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547bb0 | out: hHeap=0x530000) returned 1 [0028.981] FindNextFileA (in: hFindFile=0x552f70, lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf2bd90c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x530000, dwReserved1=0x552fa8, cFileName="Proof.xml", cAlternateFileName="")) returned 0 [0028.981] FindClose (in: hFindFile=0x552f70 | out: hFindFile=0x552f70) returned 1 [0028.981] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x40650500, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x40650500, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf0126df0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd4200, dwReserved0=0x530000, dwReserved1=0x552f20, cFileName="Proofing.msi", cAlternateFileName="")) returned 1 [0028.981] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x32b, dwReserved0=0x530000, dwReserved1=0x552f20, cFileName="Proofing.xml", cAlternateFileName="")) returned 1 [0028.981] AreFileApisANSI () returned 1 [0028.981] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38d728, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 77 [0028.984] AreFileApisANSI () returned 1 [0028.984] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38d728, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 77 [0028.984] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x552f28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0028.984] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml.masked" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.xml.masked"), dwFlags=0x2) returned 1 [0028.984] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552f90 | out: hHeap=0x530000) returned 1 [0028.984] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552f28 | out: hHeap=0x530000) returned 1 [0028.985] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ed0 | out: hHeap=0x530000) returned 1 [0028.985] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548070 | out: hHeap=0x530000) returned 1 [0028.985] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547bb0 | out: hHeap=0x530000) returned 1 [0028.985] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42c75f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x42c75f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf58c6830, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x16fc, dwReserved0=0xfffffffe, dwReserved1=0x7716387a, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0028.985] AreFileApisANSI () returned 1 [0028.985] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38d728, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0028.992] AreFileApisANSI () returned 1 [0028.992] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38d728, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0028.992] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x552f28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0028.992] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml.masked" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\setup.xml.masked"), dwFlags=0x2) returned 1 [0028.993] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552f90 | out: hHeap=0x530000) returned 1 [0028.993] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552f28 | out: hHeap=0x530000) returned 1 [0028.993] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ed0 | out: hHeap=0x530000) returned 1 [0028.993] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548070 | out: hHeap=0x530000) returned 1 [0028.993] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547bb0 | out: hHeap=0x530000) returned 1 [0028.993] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42c75f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x42c75f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf58c6830, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x16fc, dwReserved0=0xfffffffe, dwReserved1=0x7716387a, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0028.993] FindClose (in: hFindFile=0x547ad0 | out: hFindFile=0x547ad0) returned 1 [0028.993] FindNextFileA (in: hFindFile=0x552e90, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc138cb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc3e6570, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc3e6570, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x38d9d4, dwReserved1=0x77163c74, cFileName="{90140000-0043-0409-1000-0000000FF1CE}-C", cAlternateFileName="{95310~1")) returned 1 [0028.993] AreFileApisANSI () returned 1 [0028.993] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5422e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0028.997] AreFileApisANSI () returned 1 [0028.997] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5422e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 98 [0028.998] FindFirstFileA (in: lpFileName="C:\\\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc138cb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x64eb4600, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x64eb4600, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7a000872, dwReserved1=0xf1, cFileName=".", cAlternateFileName="")) returned 0x547ad0 [0028.998] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc138cb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x64eb4600, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x64eb4600, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7a000872, dwReserved1=0xf1, cFileName="..", cAlternateFileName="")) returned 1 [0028.998] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64eb4600, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x64eb4600, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x64eb4600, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x7a000872, dwReserved1=0xf1, cFileName="@@_OpenTheBrowserTOR_@@.html", cAlternateFileName="@@_OPE~1.HTM")) returned 1 [0028.998] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64eb4600, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x64eb4600, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x64eb4600, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x530000, dwReserved1=0x552f30, cFileName="@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html", cAlternateFileName="@@____~1.HTM")) returned 1 [0028.998] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc138cb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd5600, dwReserved0=0x38d070, dwReserved1=0x77163c74, cFileName="Office32MUI.msi", cAlternateFileName="OFFICE~1.MSI")) returned 1 [0028.999] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc138cb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x567, dwReserved0=0x530000, dwReserved1=0x552f20, cFileName="Office32MUI.xml", cAlternateFileName="OFFICE~1.XML")) returned 1 [0028.999] AreFileApisANSI () returned 1 [0028.999] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38d728, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 80 [0029.002] AreFileApisANSI () returned 1 [0029.002] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38d728, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 80 [0029.002] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x552f28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 87 [0029.002] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml.masked" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.xml.masked"), dwFlags=0x2) returned 1 [0029.002] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552f90 | out: hHeap=0x530000) returned 1 [0029.003] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552f28 | out: hHeap=0x530000) returned 1 [0029.003] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ed0 | out: hHeap=0x530000) returned 1 [0029.003] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548070 | out: hHeap=0x530000) returned 1 [0029.003] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547bb0 | out: hHeap=0x530000) returned 1 [0029.003] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc301560, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2cb13b, dwReserved0=0xfffffffe, dwReserved1=0x7716387a, cFileName="OWOW32LR.cab", cAlternateFileName="")) returned 1 [0029.003] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x93a, dwReserved0=0x530000, dwReserved1=0x552f20, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0029.003] AreFileApisANSI () returned 1 [0029.003] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38d728, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0029.007] AreFileApisANSI () returned 1 [0029.007] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38d728, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0029.007] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x552f28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0029.007] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml.masked" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\setup.xml.masked"), dwFlags=0x2) returned 1 [0029.010] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552f90 | out: hHeap=0x530000) returned 1 [0029.010] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552f28 | out: hHeap=0x530000) returned 1 [0029.010] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ed0 | out: hHeap=0x530000) returned 1 [0029.010] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548070 | out: hHeap=0x530000) returned 1 [0029.010] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547bb0 | out: hHeap=0x530000) returned 1 [0029.010] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x93a, dwReserved0=0x530000, dwReserved1=0x552f20, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0029.010] FindClose (in: hFindFile=0x547ad0 | out: hFindFile=0x547ad0) returned 1 [0029.011] FindNextFileA (in: hFindFile=0x552e90, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf6e34d70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa13c510, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x38d9d4, dwReserved1=0x77163c74, cFileName="{90140000-0044-0409-1000-0000000FF1CE}-C", cAlternateFileName="{91454~1")) returned 1 [0029.011] AreFileApisANSI () returned 1 [0029.011] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5422e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0029.014] AreFileApisANSI () returned 1 [0029.014] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5422e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 98 [0029.022] FindFirstFileA (in: lpFileName="C:\\\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf6e34d70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x64f008c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x64f008c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7a000872, dwReserved1=0xf1, cFileName=".", cAlternateFileName="")) returned 0x547ad0 [0029.022] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf6e34d70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x64f008c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x64f008c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7a000872, dwReserved1=0xf1, cFileName="..", cAlternateFileName="")) returned 1 [0029.022] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64eda760, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x64eda760, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x64eda760, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x7a000872, dwReserved1=0xf1, cFileName="@@_OpenTheBrowserTOR_@@.html", cAlternateFileName="@@_OPE~1.HTM")) returned 1 [0029.022] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64f008c0, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x64f008c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x64f008c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x530000, dwReserved1=0x552f30, cFileName="@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html", cAlternateFileName="@@____~1.HTM")) returned 1 [0029.023] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf79111d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1200204, dwReserved0=0x38d070, dwReserved1=0x77163c74, cFileName="InfLR.cab", cAlternateFileName="")) returned 1 [0029.023] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e58f90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2fac00, dwReserved0=0x530000, dwReserved1=0x552f20, cFileName="InfoPathMUI.msi", cAlternateFileName="INFOPA~1.MSI")) returned 1 [0029.023] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e345a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x4cf, dwReserved0=0x530000, dwReserved1=0x552f20, cFileName="InfoPathMUI.xml", cAlternateFileName="INFOPA~1.XML")) returned 1 [0029.023] AreFileApisANSI () returned 1 [0029.023] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38d728, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 80 [0029.026] AreFileApisANSI () returned 1 [0029.026] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38d728, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 80 [0029.026] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x552f28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 87 [0029.026] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\infopathmui.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml.masked" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\infopathmui.xml.masked"), dwFlags=0x2) returned 1 [0029.026] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552f90 | out: hHeap=0x530000) returned 1 [0029.026] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552f28 | out: hHeap=0x530000) returned 1 [0029.026] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ed0 | out: hHeap=0x530000) returned 1 [0029.026] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548070 | out: hHeap=0x530000) returned 1 [0029.026] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547bb0 | out: hHeap=0x530000) returned 1 [0029.026] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x73c, dwReserved0=0xfffffffe, dwReserved1=0x7716387a, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0029.026] AreFileApisANSI () returned 1 [0029.026] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38d728, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0029.037] AreFileApisANSI () returned 1 [0029.037] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38d728, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0029.037] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x552f28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0029.037] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml.masked" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\setup.xml.masked"), dwFlags=0x2) returned 1 [0029.038] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552f90 | out: hHeap=0x530000) returned 1 [0029.038] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552f28 | out: hHeap=0x530000) returned 1 [0029.038] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ed0 | out: hHeap=0x530000) returned 1 [0029.038] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548070 | out: hHeap=0x530000) returned 1 [0029.038] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547bb0 | out: hHeap=0x530000) returned 1 [0029.038] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x73c, dwReserved0=0xfffffffe, dwReserved1=0x7716387a, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0029.038] FindClose (in: hFindFile=0x547ad0 | out: hFindFile=0x547ad0) returned 1 [0029.038] FindNextFileA (in: hFindFile=0x552e90, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x435769e0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x43bdc500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x38d9d4, dwReserved1=0x77163c74, cFileName="{90140000-0054-0409-1000-0000000FF1CE}-C", cAlternateFileName="{9EA85~1")) returned 1 [0029.038] AreFileApisANSI () returned 1 [0029.038] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5422e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0029.041] AreFileApisANSI () returned 1 [0029.041] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5422e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 98 [0029.043] FindFirstFileA (in: lpFileName="C:\\\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x435769e0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x64f26a20, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x64f26a20, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7a000872, dwReserved1=0xf1, cFileName=".", cAlternateFileName="")) returned 0x547ad0 [0029.043] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x435769e0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x64f26a20, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x64f26a20, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7a000872, dwReserved1=0xf1, cFileName="..", cAlternateFileName="")) returned 1 [0029.043] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64f26a20, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x64f26a20, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x64f26a20, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x7a000872, dwReserved1=0xf1, cFileName="@@_OpenTheBrowserTOR_@@.html", cAlternateFileName="@@_OPE~1.HTM")) returned 1 [0029.043] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64f26a20, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x64f26a20, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x64f26a20, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x530000, dwReserved1=0x552f30, cFileName="@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html", cAlternateFileName="@@____~1.HTM")) returned 1 [0029.043] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5f356eb0, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x5f356eb0, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x1861, dwReserved0=0x38d070, dwReserved1=0x77163c74, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0029.044] AreFileApisANSI () returned 1 [0029.044] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38d728, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0029.055] AreFileApisANSI () returned 1 [0029.055] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38d728, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0029.055] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x552f28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0029.055] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml.masked" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\setup.xml.masked"), dwFlags=0x2) returned 1 [0029.056] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552f90 | out: hHeap=0x530000) returned 1 [0029.056] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552f28 | out: hHeap=0x530000) returned 1 [0029.056] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ed0 | out: hHeap=0x530000) returned 1 [0029.057] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548070 | out: hHeap=0x530000) returned 1 [0029.057] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547bb0 | out: hHeap=0x530000) returned 1 [0029.057] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7fb9f9e0, ftCreationTime.dwHighDateTime=0x1cbe575, ftLastAccessTime.dwLowDateTime=0x7fb9f9e0, ftLastAccessTime.dwHighDateTime=0x1cbe575, ftLastWriteTime.dwLowDateTime=0x437179c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x30780dd, dwReserved0=0xfffffffe, dwReserved1=0x7716387a, cFileName="VisioLR.cab", cAlternateFileName="")) returned 1 [0029.057] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x272b1e70, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x272b1e70, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x435c1d00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2ab000, dwReserved0=0x530000, dwReserved1=0x552f20, cFileName="VisioMUI.msi", cAlternateFileName="")) returned 1 [0029.057] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5f0a8e20, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x5f0a8e20, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x4359ac00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x251f, dwReserved0=0x530000, dwReserved1=0x552f20, cFileName="VisioMUI.xml", cAlternateFileName="")) returned 1 [0029.057] AreFileApisANSI () returned 1 [0029.057] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38d728, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 77 [0029.080] AreFileApisANSI () returned 1 [0029.080] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38d728, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 77 [0029.080] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x552f28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0029.080] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiomui.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml.masked" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiomui.xml.masked"), dwFlags=0x2) returned 1 [0029.081] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552f90 | out: hHeap=0x530000) returned 1 [0029.081] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552f28 | out: hHeap=0x530000) returned 1 [0029.081] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ed0 | out: hHeap=0x530000) returned 1 [0029.081] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548070 | out: hHeap=0x530000) returned 1 [0029.081] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547bb0 | out: hHeap=0x530000) returned 1 [0029.081] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5f0a8e20, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x5f0a8e20, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x4359ac00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x251f, dwReserved0=0x530000, dwReserved1=0x552f20, cFileName="VisioMUI.xml", cAlternateFileName="")) returned 0 [0029.081] FindClose (in: hFindFile=0x547ad0 | out: hFindFile=0x547ad0) returned 1 [0029.081] FindNextFileA (in: hFindFile=0x552e90, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf58ee8d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf6e0ec10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf6e0ec10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x38d9d4, dwReserved1=0x77163c74, cFileName="{90140000-00A1-0409-1000-0000000FF1CE}-C", cAlternateFileName="{92572~1")) returned 1 [0029.081] AreFileApisANSI () returned 1 [0029.081] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5422e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0029.087] AreFileApisANSI () returned 1 [0029.087] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5422e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 98 [0029.088] FindFirstFileA (in: lpFileName="C:\\\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf58ee8d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x64f98e40, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x64f98e40, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7a000872, dwReserved1=0xf1, cFileName=".", cAlternateFileName="")) returned 0x547ad0 [0029.088] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf58ee8d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x64f98e40, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x64f98e40, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7a000872, dwReserved1=0xf1, cFileName="..", cAlternateFileName="")) returned 1 [0029.088] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64f98e40, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x64f98e40, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x64f98e40, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x7a000872, dwReserved1=0xf1, cFileName="@@_OpenTheBrowserTOR_@@.html", cAlternateFileName="@@_OPE~1.HTM")) returned 1 [0029.088] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64f98e40, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x64f98e40, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x64f98e40, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x530000, dwReserved1=0x552f30, cFileName="@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html", cAlternateFileName="@@____~1.HTM")) returned 1 [0029.088] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf5914a30, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x263400, dwReserved0=0x38d070, dwReserved1=0x77163c74, cFileName="OneNoteMUI.msi", cAlternateFileName="ONENOT~1.MSI")) returned 1 [0029.088] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf58ed930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x646, dwReserved0=0x530000, dwReserved1=0x552f20, cFileName="OneNoteMUI.xml", cAlternateFileName="ONENOT~1.XML")) returned 1 [0029.088] AreFileApisANSI () returned 1 [0029.088] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38d728, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0029.093] AreFileApisANSI () returned 1 [0029.093] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38d728, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0029.093] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x552f28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 86 [0029.093] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onenotemui.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml.masked" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onenotemui.xml.masked"), dwFlags=0x2) returned 1 [0029.094] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552f90 | out: hHeap=0x530000) returned 1 [0029.094] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552f28 | out: hHeap=0x530000) returned 1 [0029.094] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ed0 | out: hHeap=0x530000) returned 1 [0029.094] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548070 | out: hHeap=0x530000) returned 1 [0029.094] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547bb0 | out: hHeap=0x530000) returned 1 [0029.094] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x36db9d00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x36db9d00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf5e95540, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10a5df8, dwReserved0=0xfffffffe, dwReserved1=0x7716387a, cFileName="OnoteLR.cab", cAlternateFileName="")) returned 1 [0029.094] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e0d4a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x7c4, dwReserved0=0x530000, dwReserved1=0x552f20, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0029.094] AreFileApisANSI () returned 1 [0029.094] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38d728, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0029.099] AreFileApisANSI () returned 1 [0029.099] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38d728, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0029.099] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x552f28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0029.099] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml.masked" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\setup.xml.masked"), dwFlags=0x2) returned 1 [0029.099] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552f90 | out: hHeap=0x530000) returned 1 [0029.099] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552f28 | out: hHeap=0x530000) returned 1 [0029.099] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ed0 | out: hHeap=0x530000) returned 1 [0029.099] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548070 | out: hHeap=0x530000) returned 1 [0029.099] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547bb0 | out: hHeap=0x530000) returned 1 [0029.100] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e0d4a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x7c4, dwReserved0=0x530000, dwReserved1=0x552f20, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0029.100] FindClose (in: hFindFile=0x547ad0 | out: hFindFile=0x547ad0) returned 1 [0029.100] FindNextFileA (in: hFindFile=0x552e90, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5b30b20, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa5bc90a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5bc90a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x38d9d4, dwReserved1=0x77163c74, cFileName="{90140000-00B4-0409-1000-0000000FF1CE}-C", cAlternateFileName="{912E0~1")) returned 1 [0029.100] AreFileApisANSI () returned 1 [0029.100] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5422e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0029.104] AreFileApisANSI () returned 1 [0029.104] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5422e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 98 [0029.105] FindFirstFileA (in: lpFileName="C:\\\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5b30b20, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0x64fbefa0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x64fbefa0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7a000872, dwReserved1=0xf1, cFileName=".", cAlternateFileName="")) returned 0x547ad0 [0029.106] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5b30b20, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0x64fbefa0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x64fbefa0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7a000872, dwReserved1=0xf1, cFileName="..", cAlternateFileName="")) returned 1 [0029.106] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64fbefa0, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x64fbefa0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x64fbefa0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x7a000872, dwReserved1=0xf1, cFileName="@@_OpenTheBrowserTOR_@@.html", cAlternateFileName="@@_OPE~1.HTM")) returned 1 [0029.106] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64fbefa0, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x64fbefa0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x64fbefa0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x530000, dwReserved1=0x552f30, cFileName="@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html", cAlternateFileName="@@____~1.HTM")) returned 1 [0029.106] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x308ae9f0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x308ae9f0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5b55ce0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x265400, dwReserved0=0x38d070, dwReserved1=0x77163c74, cFileName="ProjectMUI.msi", cAlternateFileName="PROJEC~1.MSI")) returned 1 [0029.106] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30a2b7b0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x30a2b7b0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5b2ebe0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x530000, dwReserved1=0x552f20, cFileName="ProjectMUI.xml", cAlternateFileName="PROJEC~1.XML")) returned 1 [0029.106] AreFileApisANSI () returned 1 [0029.106] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38d728, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0029.110] AreFileApisANSI () returned 1 [0029.110] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38d728, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0029.110] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x552f28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 86 [0029.110] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projectmui.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml.masked" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projectmui.xml.masked"), dwFlags=0x2) returned 1 [0029.111] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552f90 | out: hHeap=0x530000) returned 1 [0029.111] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552f28 | out: hHeap=0x530000) returned 1 [0029.111] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ed0 | out: hHeap=0x530000) returned 1 [0029.111] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548070 | out: hHeap=0x530000) returned 1 [0029.111] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547bb0 | out: hHeap=0x530000) returned 1 [0029.111] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30306de0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x30306de0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5b7cde0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x7e1dcd, dwReserved0=0xfffffffe, dwReserved1=0x7716387a, cFileName="ProjLR.cab", cAlternateFileName="")) returned 1 [0029.111] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x309dfcc0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x309dfcc0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5bc88d0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x750, dwReserved0=0x530000, dwReserved1=0x552f20, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0029.111] AreFileApisANSI () returned 1 [0029.111] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38d728, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0029.115] AreFileApisANSI () returned 1 [0029.115] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38d728, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0029.115] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x552f28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0029.115] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml.masked" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\setup.xml.masked"), dwFlags=0x2) returned 1 [0029.116] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552f90 | out: hHeap=0x530000) returned 1 [0029.116] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552f28 | out: hHeap=0x530000) returned 1 [0029.116] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ed0 | out: hHeap=0x530000) returned 1 [0029.116] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548070 | out: hHeap=0x530000) returned 1 [0029.116] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547bb0 | out: hHeap=0x530000) returned 1 [0029.116] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x309dfcc0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x309dfcc0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5bc88d0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x750, dwReserved0=0x530000, dwReserved1=0x552f20, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0029.116] FindClose (in: hFindFile=0x547ad0 | out: hFindFile=0x547ad0) returned 1 [0029.116] FindNextFileA (in: hFindFile=0x552e90, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee803530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x38d9d4, dwReserved1=0x77163c74, cFileName="{90140000-00BA-0409-1000-0000000FF1CE}-C", cAlternateFileName="{90140~4")) returned 1 [0029.116] AreFileApisANSI () returned 1 [0029.116] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5422e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0029.119] AreFileApisANSI () returned 1 [0029.119] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5422e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 98 [0029.120] FindFirstFileA (in: lpFileName="C:\\\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x64fe5100, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x64fe5100, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7a000872, dwReserved1=0xf1, cFileName=".", cAlternateFileName="")) returned 0x547ad0 [0029.120] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x64fe5100, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x64fe5100, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7a000872, dwReserved1=0xf1, cFileName="..", cAlternateFileName="")) returned 1 [0029.120] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64fe5100, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x64fe5100, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x64fe5100, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x7a000872, dwReserved1=0xf1, cFileName="@@_OpenTheBrowserTOR_@@.html", cAlternateFileName="@@_OPE~1.HTM")) returned 1 [0029.120] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64fe5100, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x64fe5100, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x64fe5100, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x530000, dwReserved1=0x552f30, cFileName="@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html", cAlternateFileName="@@____~1.HTM")) returned 1 [0029.120] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee4bb7b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x3e7e1f, dwReserved0=0x38d070, dwReserved1=0x77163c74, cFileName="GrooveLR.cab", cAlternateFileName="")) returned 1 [0029.121] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee3b15e0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x264400, dwReserved0=0x530000, dwReserved1=0x552f20, cFileName="GrooveMUI.msi", cAlternateFileName="GROOVE~1.MSI")) returned 1 [0029.121] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x391, dwReserved0=0x530000, dwReserved1=0x552f20, cFileName="GrooveMUI.xml", cAlternateFileName="GROOVE~1.XML")) returned 1 [0029.121] AreFileApisANSI () returned 1 [0029.121] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38d728, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 78 [0029.124] AreFileApisANSI () returned 1 [0029.124] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38d728, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 78 [0029.124] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x552f28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 85 [0029.125] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovemui.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml.masked" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovemui.xml.masked"), dwFlags=0x2) returned 1 [0029.130] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552f90 | out: hHeap=0x530000) returned 1 [0029.130] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552f28 | out: hHeap=0x530000) returned 1 [0029.130] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ed0 | out: hHeap=0x530000) returned 1 [0029.130] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548070 | out: hHeap=0x530000) returned 1 [0029.130] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547bb0 | out: hHeap=0x530000) returned 1 [0029.130] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0xfffffffe, dwReserved1=0x7716387a, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0029.130] AreFileApisANSI () returned 1 [0029.130] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38d728, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0029.134] AreFileApisANSI () returned 1 [0029.134] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38d728, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0029.134] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x552f28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0029.134] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml.masked" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\setup.xml.masked"), dwFlags=0x2) returned 1 [0029.134] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552f90 | out: hHeap=0x530000) returned 1 [0029.134] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552f28 | out: hHeap=0x530000) returned 1 [0029.134] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ed0 | out: hHeap=0x530000) returned 1 [0029.134] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548070 | out: hHeap=0x530000) returned 1 [0029.135] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547bb0 | out: hHeap=0x530000) returned 1 [0029.135] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0xfffffffe, dwReserved1=0x7716387a, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0029.135] FindClose (in: hFindFile=0x547ad0 | out: hFindFile=0x547ad0) returned 1 [0029.135] FindNextFileA (in: hFindFile=0x552e90, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b68970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8729610, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8729610, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x38d9d4, dwReserved1=0x77163c74, cFileName="{90140000-0115-0409-1000-0000000FF1CE}-C", cAlternateFileName="{90140~1")) returned 1 [0029.135] AreFileApisANSI () returned 1 [0029.135] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5422e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0029.141] AreFileApisANSI () returned 1 [0029.141] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5422e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 98 [0029.143] FindFirstFileA (in: lpFileName="C:\\\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b68970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x650313c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x650313c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7a000872, dwReserved1=0xf1, cFileName=".", cAlternateFileName="")) returned 0x547ad0 [0029.143] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b68970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x650313c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x650313c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7a000872, dwReserved1=0xf1, cFileName="..", cAlternateFileName="")) returned 1 [0029.143] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8691090, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8691090, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7a000872, dwReserved1=0xf1, cFileName="1033", cAlternateFileName="")) returned 1 [0029.143] AreFileApisANSI () returned 1 [0029.143] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5422e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 98 [0029.145] AreFileApisANSI () returned 1 [0029.145] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5422e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 103 [0029.146] FindFirstFileA (in: lpFileName="C:\\\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8691090, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x650313c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x650313c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x77000671, dwReserved1=0xf1, cFileName=".", cAlternateFileName="")) returned 0x552f68 [0029.147] FindNextFileA (in: hFindFile=0x552f68, lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8691090, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x650313c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x650313c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x77000671, dwReserved1=0xf1, cFileName="..", cAlternateFileName="")) returned 1 [0029.147] FindNextFileA (in: hFindFile=0x552f68, lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x650313c0, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x650313c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x650313c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x77000671, dwReserved1=0xf1, cFileName="@@_OpenTheBrowserTOR_@@.html", cAlternateFileName="@@_OPE~1.HTM")) returned 1 [0029.147] FindNextFileA (in: hFindFile=0x552f68, lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x650313c0, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x650313c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x650313c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x530000, dwReserved1=0x552fa0, cFileName="@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html", cAlternateFileName="@@____~1.HTM")) returned 1 [0029.147] FindNextFileA (in: hFindFile=0x552f68, lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a35700, ftCreationTime.dwHighDateTime=0x1cac9d7, ftLastAccessTime.dwLowDateTime=0x6a35700, ftLastAccessTime.dwHighDateTime=0x1cac9d7, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1a588, dwReserved0=0x38c70c, dwReserved1=0x77163c74, cFileName="dwintl20.dll", cAlternateFileName="")) returned 1 [0029.147] FindNextFileA (in: hFindFile=0x552f68, lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a35700, ftCreationTime.dwHighDateTime=0x1cac9d7, ftLastAccessTime.dwLowDateTime=0x6a35700, ftLastAccessTime.dwHighDateTime=0x1cac9d7, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1a588, dwReserved0=0x38c70c, dwReserved1=0x77163c74, cFileName="dwintl20.dll", cAlternateFileName="")) returned 0 [0029.147] FindClose (in: hFindFile=0x552f68 | out: hFindFile=0x552f68) returned 1 [0029.147] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x650313c0, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x650313c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x650313c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x77163c74, dwReserved1=0x77163ca3, cFileName="@@_OpenTheBrowserTOR_@@.html", cAlternateFileName="@@_OPE~1.HTM")) returned 1 [0029.147] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x650313c0, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x650313c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x650313c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x530000, dwReserved1=0x552f30, cFileName="@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html", cAlternateFileName="@@____~1.HTM")) returned 1 [0029.147] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x11e8ef00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x11e8ef00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xe84c60d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x91975, dwReserved0=0x38d070, dwReserved1=0x77163c74, cFileName="branding.xml", cAlternateFileName="")) returned 1 [0029.147] AreFileApisANSI () returned 1 [0029.147] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38d728, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 77 [0029.734] AreFileApisANSI () returned 1 [0029.734] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38d728, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 77 [0029.734] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x552f28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0029.734] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\branding.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml.masked" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\branding.xml.masked"), dwFlags=0x2) returned 1 [0029.735] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552f90 | out: hHeap=0x530000) returned 1 [0029.735] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552f28 | out: hHeap=0x530000) returned 1 [0029.735] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ed0 | out: hHeap=0x530000) returned 1 [0029.735] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548070 | out: hHeap=0x530000) returned 1 [0029.735] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547bb0 | out: hHeap=0x530000) returned 1 [0029.735] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa26c9d00, ftCreationTime.dwHighDateTime=0x1cac9ae, ftLastAccessTime.dwLowDateTime=0xa26c9d00, ftLastAccessTime.dwHighDateTime=0x1cac9ae, ftLastWriteTime.dwLowDateTime=0xe85142d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xccb88, dwReserved0=0xfffffffe, dwReserved1=0x7716387a, cFileName="DW20.EXE", cAlternateFileName="")) returned 1 [0029.735] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xabf60500, ftCreationTime.dwHighDateTime=0x1cac9ae, ftLastAccessTime.dwLowDateTime=0xabf60500, ftLastAccessTime.dwHighDateTime=0x1cac9ae, ftLastWriteTime.dwLowDateTime=0xe85ab8b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x80760, dwReserved0=0x530000, dwReserved1=0x552f20, cFileName="dwdcw20.dll", cAlternateFileName="")) returned 1 [0029.735] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xabf60500, ftCreationTime.dwHighDateTime=0x1cac9ae, ftLastAccessTime.dwLowDateTime=0xabf60500, ftLastAccessTime.dwHighDateTime=0x1cac9ae, ftLastWriteTime.dwLowDateTime=0xe85f73a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x7eda0, dwReserved0=0x530000, dwReserved1=0x552f20, cFileName="dwtrig20.exe", cAlternateFileName="")) returned 1 [0029.735] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8d646800, ftCreationTime.dwHighDateTime=0x1cacc53, ftLastAccessTime.dwLowDateTime=0x8d646800, ftLastAccessTime.dwHighDateTime=0x1cacc53, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x741, dwReserved0=0x530000, dwReserved1=0x552f20, cFileName="Microsoft.VC90.CRT.manifest", cAlternateFileName="MICROS~1.MAN")) returned 1 [0029.735] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8c333b00, ftCreationTime.dwHighDateTime=0x1cacc53, ftLastAccessTime.dwLowDateTime=0x8c333b00, ftLastAccessTime.dwHighDateTime=0x1cacc53, ftLastWriteTime.dwLowDateTime=0xe86b5a80, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xa0200, dwReserved0=0x530000, dwReserved1=0x552f30, cFileName="msvcr90.dll", cAlternateFileName="")) returned 1 [0029.735] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3ba05100, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3ba05100, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7e3b3f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd79282, dwReserved0=0x530000, dwReserved1=0x552f20, cFileName="OfficeLR.cab", cAlternateFileName="")) returned 1 [0029.736] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3cd17e00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3cd17e00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7c4ba40, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x387e00, dwReserved0=0x530000, dwReserved1=0x552f20, cFileName="OfficeMUI.msi", cAlternateFileName="OFFICE~2.MSI")) returned 1 [0029.736] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7c27050, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x15b5, dwReserved0=0x530000, dwReserved1=0x552f20, cFileName="OfficeMUI.xml", cAlternateFileName="OFFICE~2.XML")) returned 1 [0029.736] AreFileApisANSI () returned 1 [0029.736] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38d728, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 78 [0029.745] AreFileApisANSI () returned 1 [0029.745] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38d728, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 78 [0029.745] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x552f28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 85 [0029.746] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemui.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml.masked" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemui.xml.masked"), dwFlags=0x2) returned 1 [0029.748] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552f90 | out: hHeap=0x530000) returned 1 [0029.748] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552f28 | out: hHeap=0x530000) returned 1 [0029.748] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ed0 | out: hHeap=0x530000) returned 1 [0029.748] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548070 | out: hHeap=0x530000) returned 1 [0029.748] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547bb0 | out: hHeap=0x530000) returned 1 [0029.748] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7b68970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd4200, dwReserved0=0xfffffffe, dwReserved1=0x7716387a, cFileName="OfficeMUISet.msi", cAlternateFileName="OFFICE~1.MSI")) returned 1 [0029.748] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7b68970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x333, dwReserved0=0x530000, dwReserved1=0x552f30, cFileName="OfficeMUISet.xml", cAlternateFileName="OFFICE~1.XML")) returned 1 [0029.748] AreFileApisANSI () returned 1 [0029.748] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38d728, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0029.753] AreFileApisANSI () returned 1 [0029.753] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38d728, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0029.753] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x552f38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 88 [0029.754] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemuiset.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml.masked" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemuiset.xml.masked"), dwFlags=0x2) returned 1 [0029.754] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552fa0 | out: hHeap=0x530000) returned 1 [0029.754] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552f38 | out: hHeap=0x530000) returned 1 [0029.754] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ed0 | out: hHeap=0x530000) returned 1 [0029.754] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548070 | out: hHeap=0x530000) returned 1 [0029.754] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547bb0 | out: hHeap=0x530000) returned 1 [0029.754] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc8b16200, ftCreationTime.dwHighDateTime=0x1cac190, ftLastAccessTime.dwLowDateTime=0xc8b16200, ftLastAccessTime.dwHighDateTime=0x1cac190, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2ed80, dwReserved0=0xfffffffe, dwReserved1=0x7716387a, cFileName="osetupui.dll", cAlternateFileName="")) returned 1 [0029.755] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x77cbb000, ftCreationTime.dwHighDateTime=0x1cac57a, ftLastAccessTime.dwLowDateTime=0x77cbb000, ftLastAccessTime.dwHighDateTime=0x1cac57a, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x6a3b, dwReserved0=0x530000, dwReserved1=0x552f20, cFileName="pss10r.chm", cAlternateFileName="")) returned 1 [0029.755] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cab9f00, ftCreationTime.dwHighDateTime=0x1cac8ad, ftLastAccessTime.dwLowDateTime=0x7cab9f00, ftLastAccessTime.dwHighDateTime=0x1cac8ad, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10676, dwReserved0=0x530000, dwReserved1=0x552f20, cFileName="setup.chm", cAlternateFileName="")) returned 1 [0029.755] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42c75f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x42c75f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2488, dwReserved0=0x530000, dwReserved1=0x552f20, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0029.755] AreFileApisANSI () returned 1 [0029.755] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38d728, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0029.771] AreFileApisANSI () returned 1 [0029.771] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38d728, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0029.771] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x552f28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0029.771] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml.masked" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\setup.xml.masked"), dwFlags=0x2) returned 1 [0029.772] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552f90 | out: hHeap=0x530000) returned 1 [0029.772] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552f28 | out: hHeap=0x530000) returned 1 [0029.772] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ed0 | out: hHeap=0x530000) returned 1 [0029.772] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548070 | out: hHeap=0x530000) returned 1 [0029.772] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547bb0 | out: hHeap=0x530000) returned 1 [0029.772] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x131a1c00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x131a1c00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xe84c60d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0xfffffffe, dwReserved1=0x7716387a, cFileName="ShellUI.MST", cAlternateFileName="")) returned 1 [0029.772] AreFileApisANSI () returned 1 [0029.772] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38d728, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0029.780] AreFileApisANSI () returned 1 [0029.780] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38d728, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0029.780] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x552f28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 83 [0029.780] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\shellui.mst"), lpNewFileName="C:\\\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST.masked" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\shellui.mst.masked"), dwFlags=0x2) returned 1 [0029.781] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552f90 | out: hHeap=0x530000) returned 1 [0029.781] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552f28 | out: hHeap=0x530000) returned 1 [0029.781] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ed0 | out: hHeap=0x530000) returned 1 [0029.781] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548070 | out: hHeap=0x530000) returned 1 [0029.781] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547bb0 | out: hHeap=0x530000) returned 1 [0029.781] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x131a1c00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x131a1c00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xe84c60d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0xfffffffe, dwReserved1=0x7716387a, cFileName="ShellUI.MST", cAlternateFileName="")) returned 0 [0029.781] FindClose (in: hFindFile=0x547ad0 | out: hFindFile=0x547ad0) returned 1 [0029.781] FindNextFileA (in: hFindFile=0x552e90, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc112b50, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc112b50, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x38d9d4, dwReserved1=0x77163c74, cFileName="{90140000-0117-0409-1000-0000000FF1CE}-C", cAlternateFileName="{9AFC7~1")) returned 1 [0029.781] AreFileApisANSI () returned 1 [0029.781] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5422e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0029.785] AreFileApisANSI () returned 1 [0029.785] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5422e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 98 [0029.787] FindFirstFileA (in: lpFileName="C:\\\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x6564ac20, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x6564ac20, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7a000872, dwReserved1=0xf1, cFileName=".", cAlternateFileName="")) returned 0x547ad0 [0029.787] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x6564ac20, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x6564ac20, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7a000872, dwReserved1=0xf1, cFileName="..", cAlternateFileName="")) returned 1 [0029.788] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6564ac20, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x6564ac20, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x6564ac20, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x7a000872, dwReserved1=0xf1, cFileName="@@_OpenTheBrowserTOR_@@.html", cAlternateFileName="@@_OPE~1.HTM")) returned 1 [0029.788] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6564ac20, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x6564ac20, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x6564ac20, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x530000, dwReserved1=0x552f30, cFileName="@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html", cAlternateFileName="@@____~1.HTM")) returned 1 [0029.788] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfa2b92d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc0c6890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc0c6890, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x38d070, dwReserved1=0x77163c74, cFileName="Access.en-us", cAlternateFileName="ACCESS~1.EN-")) returned 1 [0029.788] AreFileApisANSI () returned 1 [0029.788] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5422e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 106 [0029.795] AreFileApisANSI () returned 1 [0029.795] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5422e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 111 [0029.796] FindFirstFileA (in: lpFileName="C:\\\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfa2b92d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x65670d80, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x65670d80, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x77000671, dwReserved1=0xf1, cFileName=".", cAlternateFileName="")) returned 0x552f78 [0029.796] FindNextFileA (in: hFindFile=0x552f78, lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfa2b92d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x65670d80, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x65670d80, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x77000671, dwReserved1=0xf1, cFileName="..", cAlternateFileName="")) returned 1 [0029.796] FindNextFileA (in: hFindFile=0x552f78, lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6564ac20, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x6564ac20, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x65670d80, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x77000671, dwReserved1=0xf1, cFileName="@@_OpenTheBrowserTOR_@@.html", cAlternateFileName="@@_OPE~1.HTM")) returned 1 [0029.797] FindNextFileA (in: hFindFile=0x552f78, lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x65670d80, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x65670d80, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x65670d80, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x530000, dwReserved1=0x552fb0, cFileName="@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html", cAlternateFileName="@@____~1.HTM")) returned 1 [0029.797] FindNextFileA (in: hFindFile=0x552f78, lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa623330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x266a00, dwReserved0=0x38c70c, dwReserved1=0x77163c74, cFileName="AccessMUI.msi", cAlternateFileName="ACCESS~1.MSI")) returned 1 [0029.797] FindNextFileA (in: hFindFile=0x552f78, lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa5fe940, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x545, dwReserved0=0x530000, dwReserved1=0x552fb0, cFileName="AccessMUI.xml", cAlternateFileName="ACCESS~1.XML")) returned 1 [0029.797] AreFileApisANSI () returned 1 [0029.797] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38cdc4, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 91 [0029.801] AreFileApisANSI () returned 1 [0029.801] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38cdc4, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 91 [0029.801] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x552fb8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 98 [0029.801] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\accessmui.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml.masked" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\accessmui.xml.masked"), dwFlags=0x2) returned 1 [0029.802] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x553030 | out: hHeap=0x530000) returned 1 [0029.802] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552fb8 | out: hHeap=0x530000) returned 1 [0029.802] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ed0 | out: hHeap=0x530000) returned 1 [0029.802] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548070 | out: hHeap=0x530000) returned 1 [0029.802] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547bb0 | out: hHeap=0x530000) returned 1 [0029.802] FindNextFileA (in: hFindFile=0x552f78, lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3216e900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3216e900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa64a430, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1ab7e94, dwReserved0=0xfffffffe, dwReserved1=0x7716387a, cFileName="AccLR.cab", cAlternateFileName="")) returned 1 [0029.802] FindNextFileA (in: hFindFile=0x552f78, lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x11e8ef00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x11e8ef00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xfc0c60c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x91975, dwReserved0=0x530000, dwReserved1=0x552fb0, cFileName="branding.xml", cAlternateFileName="")) returned 1 [0029.802] AreFileApisANSI () returned 1 [0029.802] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38cdc4, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 90 [0030.486] AreFileApisANSI () returned 1 [0030.486] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38cdc4, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 90 [0030.486] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x552fb8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 97 [0030.486] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\branding.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml.masked" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\branding.xml.masked"), dwFlags=0x2) returned 1 [0030.487] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x553030 | out: hHeap=0x530000) returned 1 [0030.487] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552fb8 | out: hHeap=0x530000) returned 1 [0030.487] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ed0 | out: hHeap=0x530000) returned 1 [0030.487] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548070 | out: hHeap=0x530000) returned 1 [0030.487] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547bb0 | out: hHeap=0x530000) returned 1 [0030.487] FindNextFileA (in: hFindFile=0x552f78, lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x11e8ef00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x11e8ef00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xfc0c60c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x91975, dwReserved0=0x530000, dwReserved1=0x552fb0, cFileName="branding.xml", cAlternateFileName="")) returned 0 [0030.487] FindClose (in: hFindFile=0x552f78 | out: hFindFile=0x552f78) returned 1 [0030.487] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa160f00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd4200, dwReserved0=0x530000, dwReserved1=0x552f20, cFileName="AccessMUISet.msi", cAlternateFileName="ACCESS~1.MSI")) returned 1 [0030.487] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x333, dwReserved0=0x530000, dwReserved1=0x552f30, cFileName="AccessMUISet.xml", cAlternateFileName="ACCESS~1.XML")) returned 1 [0030.487] AreFileApisANSI () returned 1 [0030.487] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38d728, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0030.490] AreFileApisANSI () returned 1 [0030.490] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38d728, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0030.491] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x552f38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 88 [0030.491] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\accessmuiset.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml.masked" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\accessmuiset.xml.masked"), dwFlags=0x2) returned 1 [0030.491] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552fa0 | out: hHeap=0x530000) returned 1 [0030.491] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552f38 | out: hHeap=0x530000) returned 1 [0030.491] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ed0 | out: hHeap=0x530000) returned 1 [0030.491] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548070 | out: hHeap=0x530000) returned 1 [0030.491] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547bb0 | out: hHeap=0x530000) returned 1 [0030.491] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc111bb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xa40, dwReserved0=0xfffffffe, dwReserved1=0x7716387a, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0030.492] AreFileApisANSI () returned 1 [0030.492] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38d728, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0030.497] AreFileApisANSI () returned 1 [0030.497] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38d728, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0030.497] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x552f28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0030.497] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml.masked" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\setup.xml.masked"), dwFlags=0x2) returned 1 [0030.498] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552f90 | out: hHeap=0x530000) returned 1 [0030.498] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552f28 | out: hHeap=0x530000) returned 1 [0030.498] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ed0 | out: hHeap=0x530000) returned 1 [0030.498] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548070 | out: hHeap=0x530000) returned 1 [0030.498] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547bb0 | out: hHeap=0x530000) returned 1 [0030.498] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc111bb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xa40, dwReserved0=0xfffffffe, dwReserved1=0x7716387a, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0030.498] FindClose (in: hFindFile=0x547ad0 | out: hFindFile=0x547ad0) returned 1 [0030.498] FindNextFileA (in: hFindFile=0x552e90, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfe09ced0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x18179b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18179b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x38d9d4, dwReserved1=0x77163c74, cFileName="{91140000-0011-0000-1000-0000000FF1CE}-C", cAlternateFileName="{91140~1")) returned 1 [0030.498] AreFileApisANSI () returned 1 [0030.498] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5422e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0030.502] AreFileApisANSI () returned 1 [0030.502] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5422e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 98 [0030.503] FindFirstFileA (in: lpFileName="C:\\\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfe09ced0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x65d22b60, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x65d22b60, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7a000872, dwReserved1=0xf1, cFileName=".", cAlternateFileName="")) returned 0x547ad0 [0030.504] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfe09ced0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x65d22b60, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x65d22b60, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7a000872, dwReserved1=0xf1, cFileName="..", cAlternateFileName="")) returned 1 [0030.504] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x65d22b60, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x65d22b60, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x65d22b60, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x7a000872, dwReserved1=0xf1, cFileName="@@_OpenTheBrowserTOR_@@.html", cAlternateFileName="@@_OPE~1.HTM")) returned 1 [0030.504] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x65d22b60, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x65d22b60, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x65d22b60, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x530000, dwReserved1=0x552f30, cFileName="@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html", cAlternateFileName="@@____~1.HTM")) returned 1 [0030.504] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x34ae1a00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x34ae1a00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xfe0c2860, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1e6600, dwReserved0=0x38d070, dwReserved1=0x77163c74, cFileName="Office32WW.msi", cAlternateFileName="OFFICE~1.MSI")) returned 1 [0030.504] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x940c2a00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x940c2a00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xfe09b760, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10b2, dwReserved0=0x530000, dwReserved1=0x552f20, cFileName="Office32WW.xml", cAlternateFileName="OFFICE~1.XML")) returned 1 [0030.504] AreFileApisANSI () returned 1 [0030.504] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38d728, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0030.515] AreFileApisANSI () returned 1 [0030.515] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38d728, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0030.515] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x552f28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 86 [0030.515] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\office32ww.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml.masked" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\office32ww.xml.masked"), dwFlags=0x2) returned 1 [0030.516] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552f90 | out: hHeap=0x530000) returned 1 [0030.516] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552f28 | out: hHeap=0x530000) returned 1 [0030.516] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ed0 | out: hHeap=0x530000) returned 1 [0030.516] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548070 | out: hHeap=0x530000) returned 1 [0030.516] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547bb0 | out: hHeap=0x530000) returned 1 [0030.516] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf885a000, ftCreationTime.dwHighDateTime=0x1cac4d7, ftLastAccessTime.dwLowDateTime=0xf885a000, ftLastAccessTime.dwHighDateTime=0x1cac4d7, ftLastWriteTime.dwLowDateTime=0x17c42c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x2a968, dwReserved0=0xfffffffe, dwReserved1=0x7716387a, cFileName="ose.exe", cAlternateFileName="")) returned 1 [0030.516] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd900f00, ftCreationTime.dwHighDateTime=0x1cac15b, ftLastAccessTime.dwLowDateTime=0xbd900f00, ftLastAccessTime.dwHighDateTime=0x1cac15b, ftLastWriteTime.dwLowDateTime=0x16854390, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x709768, dwReserved0=0x530000, dwReserved1=0x552f20, cFileName="osetup.dll", cAlternateFileName="")) returned 1 [0030.516] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x147e5b00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x147e5b00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xff654fc0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x228df5c, dwReserved0=0x530000, dwReserved1=0x552f20, cFileName="OWOW32WW.cab", cAlternateFileName="")) returned 1 [0030.516] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3a02e00, ftCreationTime.dwHighDateTime=0x1cac5f7, ftLastAccessTime.dwLowDateTime=0xe3a02e00, ftLastAccessTime.dwHighDateTime=0x1cac5f7, ftLastWriteTime.dwLowDateTime=0x17e0dbf0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x165510, dwReserved0=0x530000, dwReserved1=0x552f20, cFileName="PidGenX.dll", cAlternateFileName="")) returned 1 [0030.517] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe06a9500, ftCreationTime.dwHighDateTime=0x1cac7e5, ftLastAccessTime.dwLowDateTime=0xe06a9500, ftLastAccessTime.dwHighDateTime=0x1cac7e5, ftLastWriteTime.dwLowDateTime=0x17c42c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xaec3a, dwReserved0=0x530000, dwReserved1=0x552f20, cFileName="pkeyconfig-office.xrm-ms", cAlternateFileName="PKEYCO~1.XRM")) returned 1 [0030.517] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbb2e2000, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbb2e2000, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x170fe40, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x1a41c00, dwReserved0=0x530000, dwReserved1=0x552f30, cFileName="ProPlusrWW.msi", cAlternateFileName="PROPLU~1.MSI")) returned 1 [0030.517] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x170fe40, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x41d4, dwReserved0=0x530000, dwReserved1=0x552f20, cFileName="ProPlusrWW.xml", cAlternateFileName="PROPLU~1.XML")) returned 1 [0030.517] AreFileApisANSI () returned 1 [0030.517] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38d728, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0030.598] AreFileApisANSI () returned 1 [0030.598] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38d728, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0030.598] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x552f28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 86 [0030.598] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proplusrww.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml.masked" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proplusrww.xml.masked"), dwFlags=0x2) returned 1 [0030.600] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552f90 | out: hHeap=0x530000) returned 1 [0030.600] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552f28 | out: hHeap=0x530000) returned 1 [0030.600] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ed0 | out: hHeap=0x530000) returned 1 [0030.600] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548070 | out: hHeap=0x530000) returned 1 [0030.600] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547bb0 | out: hHeap=0x530000) returned 1 [0030.600] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x262b2700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x262b2700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x1ffd0c0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xa97cbdb, dwReserved0=0xfffffffe, dwReserved1=0x7716387a, cFileName="ProPrWW.cab", cAlternateFileName="")) returned 1 [0030.600] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf14900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbf14900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xc96ff40, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xd49ee31, dwReserved0=0x530000, dwReserved1=0x552f20, cFileName="ProPrWW2.cab", cAlternateFileName="")) returned 1 [0030.600] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec13c00, ftCreationTime.dwHighDateTime=0x1cac15b, ftLastAccessTime.dwLowDateTime=0xbec13c00, ftLastAccessTime.dwHighDateTime=0x1cac15b, ftLastWriteTime.dwLowDateTime=0x1682d290, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x150578, dwReserved0=0x530000, dwReserved1=0x552f20, cFileName="setup.exe", cAlternateFileName="")) returned 1 [0030.600] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x18177c50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x7976, dwReserved0=0x530000, dwReserved1=0x552f20, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0030.600] AreFileApisANSI () returned 1 [0030.600] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38d728, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0030.640] AreFileApisANSI () returned 1 [0030.640] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38d728, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0030.640] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x552f28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0030.640] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml.masked" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\setup.xml.masked"), dwFlags=0x2) returned 1 [0030.641] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552f90 | out: hHeap=0x530000) returned 1 [0030.641] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552f28 | out: hHeap=0x530000) returned 1 [0030.641] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ed0 | out: hHeap=0x530000) returned 1 [0030.641] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548070 | out: hHeap=0x530000) returned 1 [0030.641] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547bb0 | out: hHeap=0x530000) returned 1 [0030.641] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x18177c50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x7976, dwReserved0=0x530000, dwReserved1=0x552f20, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0030.641] FindClose (in: hFindFile=0x547ad0 | out: hFindFile=0x547ad0) returned 1 [0030.641] FindNextFileA (in: hFindFile=0x552e90, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5cd3a40, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa8c22f80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa8c22f80, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x38d9d4, dwReserved1=0x77163c74, cFileName="{91140000-003B-0000-1000-0000000FF1CE}-C", cAlternateFileName="{91140~3")) returned 1 [0030.641] AreFileApisANSI () returned 1 [0030.641] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5422e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0030.644] AreFileApisANSI () returned 1 [0030.644] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5422e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 98 [0030.645] FindFirstFileA (in: lpFileName="C:\\\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5cd3a40, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0x65e797c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x65e797c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7a000872, dwReserved1=0xf1, cFileName=".", cAlternateFileName="")) returned 0x547ad0 [0030.645] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5cd3a40, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0x65e797c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x65e797c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7a000872, dwReserved1=0xf1, cFileName="..", cAlternateFileName="")) returned 1 [0030.645] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x65e797c0, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x65e797c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x65e797c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x7a000872, dwReserved1=0xf1, cFileName="@@_OpenTheBrowserTOR_@@.html", cAlternateFileName="@@_OPE~1.HTM")) returned 1 [0030.645] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x65e797c0, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x65e797c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x65e797c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x530000, dwReserved1=0x552f30, cFileName="@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html", cAlternateFileName="@@____~1.HTM")) returned 1 [0030.645] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x87078450, ftCreationTime.dwHighDateTime=0x1cb147f, ftLastAccessTime.dwLowDateTime=0x87078450, ftLastAccessTime.dwHighDateTime=0x1cb147f, ftLastWriteTime.dwLowDateTime=0xa5d1e590, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x1e6600, dwReserved0=0x38d070, dwReserved1=0x77163c74, cFileName="Office32WW.msi", cAlternateFileName="OFFICE~1.MSI")) returned 1 [0030.646] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x87abdaa0, ftCreationTime.dwHighDateTime=0x1cb147f, ftLastAccessTime.dwLowDateTime=0x87abdaa0, ftLastAccessTime.dwHighDateTime=0x1cb147f, ftLastWriteTime.dwLowDateTime=0xa5cd2aa0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x10b2, dwReserved0=0x530000, dwReserved1=0x552f20, cFileName="Office32WW.xml", cAlternateFileName="OFFICE~1.XML")) returned 1 [0030.646] AreFileApisANSI () returned 1 [0030.646] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38d728, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0030.654] AreFileApisANSI () returned 1 [0030.654] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38d728, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0030.654] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x552f28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 86 [0030.654] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\office32ww.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml.masked" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\office32ww.xml.masked"), dwFlags=0x2) returned 1 [0030.655] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552f90 | out: hHeap=0x530000) returned 1 [0030.655] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552f28 | out: hHeap=0x530000) returned 1 [0030.655] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ed0 | out: hHeap=0x530000) returned 1 [0030.655] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548070 | out: hHeap=0x530000) returned 1 [0030.655] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547bb0 | out: hHeap=0x530000) returned 1 [0030.655] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe57f8e0, ftCreationTime.dwHighDateTime=0x1cbe1cb, ftLastAccessTime.dwLowDateTime=0xfe57f8e0, ftLastAccessTime.dwHighDateTime=0x1cbe1cb, ftLastWriteTime.dwLowDateTime=0xa8bafbc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x2a968, dwReserved0=0xfffffffe, dwReserved1=0x7716387a, cFileName="ose.exe", cAlternateFileName="")) returned 1 [0030.655] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6644b620, ftCreationTime.dwHighDateTime=0x1cb04b2, ftLastAccessTime.dwLowDateTime=0x6644b620, ftLastAccessTime.dwHighDateTime=0x1cb04b2, ftLastWriteTime.dwLowDateTime=0xa81b8770, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x709768, dwReserved0=0x530000, dwReserved1=0x552f20, cFileName="osetup.dll", cAlternateFileName="")) returned 1 [0030.655] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8238e540, ftCreationTime.dwHighDateTime=0x1cb147f, ftLastAccessTime.dwLowDateTime=0x8238e540, ftLastAccessTime.dwHighDateTime=0x1cb147f, ftLastWriteTime.dwLowDateTime=0xa5ddcc70, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x228df5c, dwReserved0=0x530000, dwReserved1=0x552f20, cFileName="OWOW32WW.cab", cAlternateFileName="")) returned 1 [0030.655] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7bd91af0, ftCreationTime.dwHighDateTime=0x1cb07b2, ftLastAccessTime.dwLowDateTime=0x7bd91af0, ftLastAccessTime.dwHighDateTime=0x1cb07b2, ftLastWriteTime.dwLowDateTime=0xa8bafbc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x165510, dwReserved0=0x530000, dwReserved1=0x552f20, cFileName="PidGenX.dll", cAlternateFileName="")) returned 1 [0030.655] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2a2397e0, ftCreationTime.dwHighDateTime=0x1cbe19a, ftLastAccessTime.dwLowDateTime=0x2a2397e0, ftLastAccessTime.dwHighDateTime=0x1cbe19a, ftLastWriteTime.dwLowDateTime=0xa8bafbc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0xaec3a, dwReserved0=0x530000, dwReserved1=0x552f20, cFileName="pkeyconfig-office.xrm-ms", cAlternateFileName="PKEYCO~1.XRM")) returned 1 [0030.656] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7c1614f0, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7c1614f0, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa60fd8f0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0xa4c400, dwReserved0=0x530000, dwReserved1=0x552f30, cFileName="PrjProrWW.msi", cAlternateFileName="PRJPRO~1.MSI")) returned 1 [0030.656] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cabec50, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7cabec50, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa60fd8f0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x1915, dwReserved0=0x530000, dwReserved1=0x552f20, cFileName="PrjProrWW.xml", cAlternateFileName="PRJPRO~1.XML")) returned 1 [0030.656] AreFileApisANSI () returned 1 [0030.656] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38d728, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 78 [0030.667] AreFileApisANSI () returned 1 [0030.667] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38d728, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 78 [0030.667] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x552f28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 85 [0030.667] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprorww.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml.masked" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprorww.xml.masked"), dwFlags=0x2) returned 1 [0030.668] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552f90 | out: hHeap=0x530000) returned 1 [0030.668] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552f28 | out: hHeap=0x530000) returned 1 [0030.668] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ed0 | out: hHeap=0x530000) returned 1 [0030.668] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548070 | out: hHeap=0x530000) returned 1 [0030.668] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547bb0 | out: hHeap=0x530000) returned 1 [0030.668] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6c87b0c0, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x6c87b0c0, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa6b67930, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x9b6ba9f, dwReserved0=0xfffffffe, dwReserved1=0x7716387a, cFileName="PrjPrrWW.cab", cAlternateFileName="")) returned 1 [0030.668] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x69dde270, ftCreationTime.dwHighDateTime=0x1cb04b2, ftLastAccessTime.dwLowDateTime=0x69dde270, ftLastAccessTime.dwHighDateTime=0x1cb04b2, ftLastWriteTime.dwLowDateTime=0xa8191670, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x150578, dwReserved0=0x530000, dwReserved1=0x552f20, cFileName="setup.exe", cAlternateFileName="")) returned 1 [0030.668] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7ca00570, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7ca00570, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa8c227b0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x412b, dwReserved0=0x530000, dwReserved1=0x552f20, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0030.668] AreFileApisANSI () returned 1 [0030.668] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38d728, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0030.692] AreFileApisANSI () returned 1 [0030.692] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38d728, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0030.692] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x552f28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0030.692] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml.masked" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\setup.xml.masked"), dwFlags=0x2) returned 1 [0030.693] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552f90 | out: hHeap=0x530000) returned 1 [0030.693] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552f28 | out: hHeap=0x530000) returned 1 [0030.693] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ed0 | out: hHeap=0x530000) returned 1 [0030.693] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548070 | out: hHeap=0x530000) returned 1 [0030.693] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547bb0 | out: hHeap=0x530000) returned 1 [0030.693] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7ca00570, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7ca00570, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa8c227b0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x412b, dwReserved0=0x530000, dwReserved1=0x552f20, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0030.693] FindClose (in: hFindFile=0x547ad0 | out: hFindFile=0x547ad0) returned 1 [0030.693] FindNextFileA (in: hFindFile=0x552e90, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x46538340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x4a6d41a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a6d41a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x38d9d4, dwReserved1=0x77163c74, cFileName="{91140000-0057-0000-1000-0000000FF1CE}-C", cAlternateFileName="{91140~2")) returned 1 [0030.694] AreFileApisANSI () returned 1 [0030.694] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5422e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0030.699] AreFileApisANSI () returned 1 [0030.699] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5422e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 98 [0030.703] FindFirstFileA (in: lpFileName="C:\\\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x46538340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x65f11d40, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x65f11d40, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7a000872, dwReserved1=0xf1, cFileName=".", cAlternateFileName="")) returned 0x547ad0 [0030.703] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x46538340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x65f11d40, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x65f11d40, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7a000872, dwReserved1=0xf1, cFileName="..", cAlternateFileName="")) returned 1 [0030.703] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x65eebbe0, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x65eebbe0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x65f11d40, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x7a000872, dwReserved1=0xf1, cFileName="@@_OpenTheBrowserTOR_@@.html", cAlternateFileName="@@_OPE~1.HTM")) returned 1 [0030.703] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x65f11d40, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x65f11d40, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x65f11d40, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x530000, dwReserved1=0x552f30, cFileName="@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html", cAlternateFileName="@@____~1.HTM")) returned 1 [0030.703] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5ed9630, ftCreationTime.dwHighDateTime=0x1cb12b3, ftLastAccessTime.dwLowDateTime=0xe5ed9630, ftLastAccessTime.dwHighDateTime=0x1cb12b3, ftLastWriteTime.dwLowDateTime=0x4655d500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x1e6600, dwReserved0=0x38d070, dwReserved1=0x77163c74, cFileName="Office32WW.msi", cAlternateFileName="OFFICE~1.MSI")) returned 1 [0030.703] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x16771fb0, ftCreationTime.dwHighDateTime=0x1cb12b4, ftLastAccessTime.dwLowDateTime=0x16771fb0, ftLastAccessTime.dwHighDateTime=0x1cb12b4, ftLastWriteTime.dwLowDateTime=0x46536400, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x10b2, dwReserved0=0x530000, dwReserved1=0x552f20, cFileName="Office32WW.xml", cAlternateFileName="OFFICE~1.XML")) returned 1 [0030.703] AreFileApisANSI () returned 1 [0030.703] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38d728, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0030.712] AreFileApisANSI () returned 1 [0030.712] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38d728, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0030.712] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x552f28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 86 [0030.712] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\office32ww.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml.masked" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\office32ww.xml.masked"), dwFlags=0x2) returned 1 [0030.712] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552f90 | out: hHeap=0x530000) returned 1 [0030.712] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552f28 | out: hHeap=0x530000) returned 1 [0030.712] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ed0 | out: hHeap=0x530000) returned 1 [0030.712] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548070 | out: hHeap=0x530000) returned 1 [0030.713] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547bb0 | out: hHeap=0x530000) returned 1 [0030.713] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec54b6b0, ftCreationTime.dwHighDateTime=0x1cb04a9, ftLastAccessTime.dwLowDateTime=0xec54b6b0, ftLastAccessTime.dwHighDateTime=0x1cb04a9, ftLastWriteTime.dwLowDateTime=0x4a687710, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2a968, dwReserved0=0xfffffffe, dwReserved1=0x7716387a, cFileName="ose.exe", cAlternateFileName="")) returned 1 [0030.713] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xde72fbf0, ftCreationTime.dwHighDateTime=0x1cb0d0b, ftLastAccessTime.dwLowDateTime=0xde72fbf0, ftLastAccessTime.dwHighDateTime=0x1cb0d0b, ftLastWriteTime.dwLowDateTime=0x49c902c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x709768, dwReserved0=0x530000, dwReserved1=0x552f20, cFileName="osetup.dll", cAlternateFileName="")) returned 1 [0030.713] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc9c380f0, ftCreationTime.dwHighDateTime=0x1cb12b3, ftLastAccessTime.dwLowDateTime=0xc9c380f0, ftLastAccessTime.dwHighDateTime=0x1cb12b3, ftLastWriteTime.dwLowDateTime=0x465d00f0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x228df5c, dwReserved0=0x530000, dwReserved1=0x552f20, cFileName="OWOW32WW.cab", cAlternateFileName="")) returned 1 [0030.713] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7c66670, ftCreationTime.dwHighDateTime=0x1cb0ee5, ftLastAccessTime.dwLowDateTime=0xe7c66670, ftLastAccessTime.dwHighDateTime=0x1cb0ee5, ftLastWriteTime.dwLowDateTime=0x4a6ac100, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x165510, dwReserved0=0x530000, dwReserved1=0x552f20, cFileName="PidGenX.dll", cAlternateFileName="")) returned 1 [0030.713] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x95261510, ftCreationTime.dwHighDateTime=0x1cb048a, ftLastAccessTime.dwLowDateTime=0x95261510, ftLastAccessTime.dwHighDateTime=0x1cb048a, ftLastWriteTime.dwLowDateTime=0x4a6ac100, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0xaec3a, dwReserved0=0x530000, dwReserved1=0x552f20, cFileName="pkeyconfig-office.xrm-ms", cAlternateFileName="PKEYCO~1.XRM")) returned 1 [0030.713] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xeb7e7af0, ftCreationTime.dwHighDateTime=0x1cb04a9, ftLastAccessTime.dwLowDateTime=0xeb7e7af0, ftLastAccessTime.dwHighDateTime=0x1cb04a9, ftLastWriteTime.dwLowDateTime=0x49c691c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x150578, dwReserved0=0x530000, dwReserved1=0x552f30, cFileName="setup.exe", cAlternateFileName="")) returned 1 [0030.713] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80aa51d0, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x80aa51d0, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x4a6d3200, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x5061, dwReserved0=0x530000, dwReserved1=0x552f20, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0030.713] AreFileApisANSI () returned 1 [0030.713] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38d728, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0030.745] AreFileApisANSI () returned 1 [0030.745] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38d728, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0030.745] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x552f28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0030.745] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml.masked" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\setup.xml.masked"), dwFlags=0x2) returned 1 [0030.748] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552f90 | out: hHeap=0x530000) returned 1 [0030.748] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552f28 | out: hHeap=0x530000) returned 1 [0030.748] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ed0 | out: hHeap=0x530000) returned 1 [0030.748] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548070 | out: hHeap=0x530000) returned 1 [0030.748] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547bb0 | out: hHeap=0x530000) returned 1 [0030.748] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x749b0240, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x749b0240, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x46a46a30, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0xb9fa2f7, dwReserved0=0xfffffffe, dwReserved1=0x7716387a, cFileName="VisiorWW.cab", cAlternateFileName="")) returned 1 [0030.748] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80711960, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x80711960, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x468ee660, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0xb80800, dwReserved0=0x530000, dwReserved1=0x552f20, cFileName="VisiorWW.msi", cAlternateFileName="")) returned 1 [0030.748] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80b17dc0, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x80b17dc0, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x468a2b70, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2213, dwReserved0=0x530000, dwReserved1=0x552f20, cFileName="VisiorWW.xml", cAlternateFileName="")) returned 1 [0030.748] AreFileApisANSI () returned 1 [0030.748] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38d728, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 77 [0030.762] AreFileApisANSI () returned 1 [0030.762] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38d728, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 77 [0030.762] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x552f28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0030.762] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\visiorww.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml.masked" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\visiorww.xml.masked"), dwFlags=0x2) returned 1 [0030.762] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552f90 | out: hHeap=0x530000) returned 1 [0030.762] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552f28 | out: hHeap=0x530000) returned 1 [0030.762] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ed0 | out: hHeap=0x530000) returned 1 [0030.763] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548070 | out: hHeap=0x530000) returned 1 [0030.763] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547bb0 | out: hHeap=0x530000) returned 1 [0030.763] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80b17dc0, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x80b17dc0, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x468a2b70, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2213, dwReserved0=0x530000, dwReserved1=0x552f20, cFileName="VisiorWW.xml", cAlternateFileName="")) returned 0 [0030.763] FindClose (in: hFindFile=0x547ad0 | out: hFindFile=0x547ad0) returned 1 [0030.763] FindNextFileA (in: hFindFile=0x552e90, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x46538340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x4a6d41a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a6d41a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x38d9d4, dwReserved1=0x77163c74, cFileName="{91140000-0057-0000-1000-0000000FF1CE}-C", cAlternateFileName="{91140~2")) returned 0 [0030.763] FindClose (in: hFindFile=0x552e90 | out: hFindFile=0x552e90) returned 1 [0030.763] FindNextFileA (in: hFindFile=0x547a90, lpFindFileData=0x38e4b0 | out: lpFindFileData=0x38e4b0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa5cd3a40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5cd3a40, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x38e338, dwReserved1=0x77163c74, cFileName="All Users", cAlternateFileName="ALLUSE~1")) returned 0 [0030.763] FindClose (in: hFindFile=0x547a90 | out: hFindFile=0x547a90) returned 1 [0030.763] FindNextFileA (in: hFindFile=0x547a50, lpFindFileData=0x38ee14 | out: lpFindFileData=0x38ee14*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x563d4b80, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x563d4b80, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x814762c0, ftLastWriteTime.dwHighDateTime=0x1d4d5ae, nFileSizeHigh=0x0, nFileSizeLow=0x7ff7c000, dwReserved0=0xa0000003, dwReserved1=0x7716387a, cFileName="pagefile.sys", cAlternateFileName="")) returned 1 [0030.763] FindNextFileA (in: hFindFile=0x547a50, lpFindFileData=0x38ee14 | out: lpFindFileData=0x38ee14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd72e458, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x7716387a, cFileName="PerfLogs", cAlternateFileName="")) returned 1 [0030.763] AreFileApisANSI () returned 1 [0030.763] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x548070, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 42 [0030.765] AreFileApisANSI () returned 1 [0030.765] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x548070, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 47 [0030.768] FindFirstFileA (in: lpFileName="C:\\\\PerfLogs\\*", lpFindFileData=0x38e4b0 | out: lpFindFileData=0x38e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x65faa2c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x65faa2c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x78000c74, dwReserved1=0xf9, cFileName=".", cAlternateFileName="")) returned 0x547a90 [0030.768] FindNextFileA (in: hFindFile=0x547a90, lpFindFileData=0x38e4b0 | out: lpFindFileData=0x38e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x65faa2c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x65faa2c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x78000c74, dwReserved1=0xf9, cFileName="..", cAlternateFileName="")) returned 1 [0030.768] FindNextFileA (in: hFindFile=0x547a90, lpFindFileData=0x38e4b0 | out: lpFindFileData=0x38e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65faa2c0, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x65faa2c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x65faa2c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x78000c74, dwReserved1=0xf9, cFileName="@@_OpenTheBrowserTOR_@@.html", cAlternateFileName="@@_OPE~1.HTM")) returned 1 [0030.768] FindNextFileA (in: hFindFile=0x547a90, lpFindFileData=0x38e4b0 | out: lpFindFileData=0x38e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65faa2c0, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x65faa2c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x65faa2c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x530000, dwReserved1=0x547ac8, cFileName="@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html", cAlternateFileName="@@____~1.HTM")) returned 1 [0030.768] FindNextFileA (in: hFindFile=0x547a90, lpFindFileData=0x38e4b0 | out: lpFindFileData=0x38e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbba4afc, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x38e338, dwReserved1=0x77163c74, cFileName="Admin", cAlternateFileName="")) returned 1 [0030.768] AreFileApisANSI () returned 1 [0030.768] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x548070, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 48 [0030.770] AreFileApisANSI () returned 1 [0030.770] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x548358, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 53 [0030.771] FindFirstFileA (in: lpFileName="C:\\\\PerfLogs\\Admin\\*", lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x65faa2c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x65faa2c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x79000a73, dwReserved1=0xf9, cFileName=".", cAlternateFileName="")) returned 0x547ad0 [0030.772] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x65faa2c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x65faa2c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x79000a73, dwReserved1=0xf9, cFileName="..", cAlternateFileName="")) returned 1 [0030.772] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65faa2c0, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x65faa2c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x65faa2c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x79000a73, dwReserved1=0xf9, cFileName="@@_OpenTheBrowserTOR_@@.html", cAlternateFileName="@@_OPE~1.HTM")) returned 1 [0030.772] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65faa2c0, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x65faa2c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x65faa2c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x530000, dwReserved1=0x552e88, cFileName="@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html", cAlternateFileName="@@____~1.HTM")) returned 1 [0030.772] FindNextFileA (in: hFindFile=0x547ad0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65faa2c0, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x65faa2c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x65faa2c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x530000, dwReserved1=0x552e88, cFileName="@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html", cAlternateFileName="@@____~1.HTM")) returned 0 [0030.772] FindClose (in: hFindFile=0x547ad0 | out: hFindFile=0x547ad0) returned 1 [0030.772] FindNextFileA (in: hFindFile=0x547a90, lpFindFileData=0x38e4b0 | out: lpFindFileData=0x38e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbba4afc, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x38e338, dwReserved1=0x77163c74, cFileName="Admin", cAlternateFileName="")) returned 0 [0030.772] FindClose (in: hFindFile=0x547a90 | out: hFindFile=0x547a90) returned 1 [0030.772] FindNextFileA (in: hFindFile=0x547a50, lpFindFileData=0x38ee14 | out: lpFindFileData=0x38ee14*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x5cac9de0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x5cac9de0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x7716387a, cFileName="Program Files", cAlternateFileName="PROGRA~1")) returned 1 [0030.772] AreFileApisANSI () returned 1 [0030.772] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x548070, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 47 [0030.773] GetFileType (hFile=0x60) returned 0x1 [0030.773] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547aa0 | out: hHeap=0x530000) returned 1 [0030.774] AreFileApisANSI () returned 1 [0030.774] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x548358, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 52 [0030.775] GetFileType (hFile=0x60) returned 0x1 [0030.775] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0030.776] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\*", lpFindFileData=0x38e4b0 | out: lpFindFileData=0x38e4b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x65faa2c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x65faa2c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x78000c74, dwReserved1=0xf9, cFileName=".", cAlternateFileName="")) returned 0x555c60 [0030.776] FindNextFileA (in: hFindFile=0x555c60, lpFindFileData=0x38e4b0 | out: lpFindFileData=0x38e4b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x65faa2c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x65faa2c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x78000c74, dwReserved1=0xf9, cFileName="..", cAlternateFileName="")) returned 1 [0030.776] FindNextFileA (in: hFindFile=0x555c60, lpFindFileData=0x38e4b0 | out: lpFindFileData=0x38e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65faa2c0, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x65faa2c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x65faa2c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x78000c74, dwReserved1=0xf9, cFileName="@@_OpenTheBrowserTOR_@@.html", cAlternateFileName="@@_OPE~1.HTM")) returned 1 [0030.776] FindNextFileA (in: hFindFile=0x555c60, lpFindFileData=0x38e4b0 | out: lpFindFileData=0x38e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65faa2c0, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x65faa2c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x65faa2c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x530000, dwReserved1=0x547a88, cFileName="@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html", cAlternateFileName="@@____~1.HTM")) returned 1 [0030.776] FindNextFileA (in: hFindFile=0x555c60, lpFindFileData=0x38e4b0 | out: lpFindFileData=0x38e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x5902c020, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x5902c020, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x38e338, dwReserved1=0x77163c74, cFileName="Common Files", cAlternateFileName="COMMON~1")) returned 1 [0030.776] AreFileApisANSI () returned 1 [0030.776] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x548358, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 60 [0030.777] GetFileType (hFile=0x64) returned 0x1 [0030.777] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5422e8 | out: hHeap=0x530000) returned 1 [0030.778] AreFileApisANSI () returned 1 [0030.778] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x547a90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 65 [0030.779] GetFileType (hFile=0x64) returned 0x1 [0030.779] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552fb8 | out: hHeap=0x530000) returned 1 [0030.780] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\*", lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x65fd0420, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x65fd0420, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7b000873, dwReserved1=0xf9, cFileName=".", cAlternateFileName="")) returned 0x555ca0 [0030.780] FindNextFileA (in: hFindFile=0x555ca0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x65fd0420, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x65fd0420, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7b000873, dwReserved1=0xf9, cFileName="..", cAlternateFileName="")) returned 1 [0030.780] FindNextFileA (in: hFindFile=0x555ca0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65faa2c0, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x65faa2c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x65fd0420, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x7b000873, dwReserved1=0xf9, cFileName="@@_OpenTheBrowserTOR_@@.html", cAlternateFileName="@@_OPE~1.HTM")) returned 1 [0030.780] FindNextFileA (in: hFindFile=0x555ca0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65fd0420, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x65fd0420, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x65fd0420, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x7b000873, dwReserved1=0xf9, cFileName="@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html", cAlternateFileName="@@____~1.HTM")) returned 1 [0030.780] FindNextFileA (in: hFindFile=0x555ca0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69da35f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x38d9d4, dwReserved1=0x77163c74, cFileName="DESIGNER", cAlternateFileName="")) returned 1 [0030.780] AreFileApisANSI () returned 1 [0030.780] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x552fb8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 69 [0030.782] AreFileApisANSI () returned 1 [0030.782] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x552fb8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0030.783] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\DESIGNER\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69da35f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x65fd0420, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x65fd0420, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x74000672, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555ce0 [0030.784] FindNextFileA (in: hFindFile=0x555ce0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69da35f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x65fd0420, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x65fd0420, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x74000672, dwReserved1=0x7, cFileName="..", cAlternateFileName="")) returned 1 [0030.784] FindNextFileA (in: hFindFile=0x555ce0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65fd0420, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x65fd0420, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x65fd0420, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x74000672, dwReserved1=0x7, cFileName="@@_OpenTheBrowserTOR_@@.html", cAlternateFileName="@@_OPE~1.HTM")) returned 1 [0030.784] FindNextFileA (in: hFindFile=0x555ce0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65fd0420, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x65fd0420, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x65fd0420, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x530000, dwReserved1=0x552e88, cFileName="@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html", cAlternateFileName="@@____~1.HTM")) returned 1 [0030.784] FindNextFileA (in: hFindFile=0x555ce0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6accc00, ftCreationTime.dwHighDateTime=0x1ca8d25, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc6accc00, ftLastWriteTime.dwHighDateTime=0x1ca8d25, nFileSizeHigh=0x0, nFileSizeLow=0x18340, dwReserved0=0x38d070, dwReserved1=0x77163c74, cFileName="MSADDNDR.DLL", cAlternateFileName="")) returned 1 [0030.784] FindNextFileA (in: hFindFile=0x555ce0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6accc00, ftCreationTime.dwHighDateTime=0x1ca8d25, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc6accc00, ftLastWriteTime.dwHighDateTime=0x1ca8d25, nFileSizeHigh=0x0, nFileSizeLow=0x18340, dwReserved0=0x38d070, dwReserved1=0x77163c74, cFileName="MSADDNDR.DLL", cAlternateFileName="")) returned 0 [0030.784] FindClose (in: hFindFile=0x555ce0 | out: hFindFile=0x555ce0) returned 1 [0030.784] FindNextFileA (in: hFindFile=0x555ca0, lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x81afcd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x81afcd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x77163c74, dwReserved1=0x77163ca3, cFileName="Microsoft Shared", cAlternateFileName="MICROS~1")) returned 1 [0030.784] AreFileApisANSI () returned 1 [0030.784] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x547a90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 77 [0030.785] GetFileType (hFile=0x68) returned 0x1 [0030.785] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552fb8 | out: hHeap=0x530000) returned 1 [0030.785] AreFileApisANSI () returned 1 [0030.785] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x547a90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 82 [0030.786] GetFileType (hFile=0x68) returned 0x1 [0030.786] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552fb8 | out: hHeap=0x530000) returned 1 [0030.787] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x65fd0420, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x65fd0420, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x74000672, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555ce0 [0030.787] FindNextFileA (in: hFindFile=0x555ce0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x65fd0420, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x65fd0420, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x74000672, dwReserved1=0x7, cFileName="..", cAlternateFileName="")) returned 1 [0030.787] FindNextFileA (in: hFindFile=0x555ce0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65fd0420, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x65fd0420, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x65fd0420, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x74000672, dwReserved1=0x7, cFileName="@@_OpenTheBrowserTOR_@@.html", cAlternateFileName="@@_OPE~1.HTM")) returned 1 [0030.787] FindNextFileA (in: hFindFile=0x555ce0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65fd0420, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x65fd0420, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x65fd0420, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x530000, dwReserved1=0x552e88, cFileName="@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html", cAlternateFileName="@@____~1.HTM")) returned 1 [0030.787] FindNextFileA (in: hFindFile=0x555ce0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e19d30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xdbe166c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xdbe166c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x38d070, dwReserved1=0x77163c74, cFileName="DW", cAlternateFileName="")) returned 1 [0030.787] AreFileApisANSI () returned 1 [0030.787] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x547a90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 80 [0030.790] AreFileApisANSI () returned 1 [0030.790] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x547a90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 85 [0030.796] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\DW\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e19d30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x65fd0420, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x65fd0420, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x73000271, dwReserved1=0xf9, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0030.796] FindNextFileA (in: hFindFile=0x555d20, lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e19d30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x65fd0420, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x65fd0420, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x73000271, dwReserved1=0xf9, cFileName="..", cAlternateFileName="")) returned 1 [0030.796] FindNextFileA (in: hFindFile=0x555d20, lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65fd0420, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x65fd0420, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x65fd0420, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x73000271, dwReserved1=0xf9, cFileName="@@_OpenTheBrowserTOR_@@.html", cAlternateFileName="@@_OPE~1.HTM")) returned 1 [0030.797] FindNextFileA (in: hFindFile=0x555d20, lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65fd0420, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x65fd0420, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x65ff6580, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x530000, dwReserved1=0x55bc60, cFileName="@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html", cAlternateFileName="@@____~1.HTM")) returned 1 [0030.797] FindNextFileA (in: hFindFile=0x555d20, lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a0ba500, ftCreationTime.dwHighDateTime=0x1c982ad, ftLastAccessTime.dwLowDateTime=0x6086b2d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4a0ba500, ftLastWriteTime.dwHighDateTime=0x1c982ad, nFileSizeHigh=0x0, nFileSizeLow=0x14e760, dwReserved0=0x38c70c, dwReserved1=0x77163c74, cFileName="DBGHELP.DLL", cAlternateFileName="")) returned 1 [0030.797] FindNextFileA (in: hFindFile=0x555d20, lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f8f7000, ftCreationTime.dwHighDateTime=0x1cba06d, ftLastAccessTime.dwLowDateTime=0xdb9ec040, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2f8f7000, ftLastWriteTime.dwHighDateTime=0x1cba06d, nFileSizeHigh=0x0, nFileSizeLow=0xf2b88, dwReserved0=0x38c70c, dwReserved1=0x77163c74, cFileName="DW20.EXE", cAlternateFileName="")) returned 1 [0030.797] FindNextFileA (in: hFindFile=0x555d20, lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e5e4300, ftCreationTime.dwHighDateTime=0x1cba06d, ftLastAccessTime.dwLowDateTime=0xdbe62980, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2e5e4300, ftLastWriteTime.dwHighDateTime=0x1cba06d, nFileSizeHigh=0x0, nFileSizeLow=0x99ba0, dwReserved0=0x38c70c, dwReserved1=0x77163c74, cFileName="DWTRIG20.EXE", cAlternateFileName="")) returned 1 [0030.797] FindNextFileA (in: hFindFile=0x555d20, lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e5e4300, ftCreationTime.dwHighDateTime=0x1cba06d, ftLastAccessTime.dwLowDateTime=0xdbe62980, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2e5e4300, ftLastWriteTime.dwHighDateTime=0x1cba06d, nFileSizeHigh=0x0, nFileSizeLow=0x99ba0, dwReserved0=0x38c70c, dwReserved1=0x77163c74, cFileName="DWTRIG20.EXE", cAlternateFileName="")) returned 0 [0030.797] FindClose (in: hFindFile=0x555d20 | out: hFindFile=0x555d20) returned 1 [0030.797] FindNextFileA (in: hFindFile=0x555ce0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef015d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x38d070, dwReserved1=0x77163c74, cFileName="EQUATION", cAlternateFileName="")) returned 1 [0030.797] AreFileApisANSI () returned 1 [0030.797] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x547a90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 86 [0030.799] AreFileApisANSI () returned 1 [0030.799] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x547a90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 91 [0030.801] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x65ff6580, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x65ff6580, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x73000271, dwReserved1=0xf9, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0030.801] FindNextFileA (in: hFindFile=0x555d20, lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x65ff6580, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x65ff6580, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x73000271, dwReserved1=0xf9, cFileName="..", cAlternateFileName="")) returned 1 [0030.801] FindNextFileA (in: hFindFile=0x555d20, lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed38550, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x73000271, dwReserved1=0xf9, cFileName="1033", cAlternateFileName="")) returned 1 [0030.801] AreFileApisANSI () returned 1 [0030.801] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x547a90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 91 [0030.804] AreFileApisANSI () returned 1 [0030.804] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x547a90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 96 [0030.806] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x65ff6580, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x65ff6580, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x470, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0030.806] FindNextFileA (in: hFindFile=0x555d60, lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x65ff6580, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x65ff6580, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x470, cFileName="..", cAlternateFileName="")) returned 1 [0030.806] FindNextFileA (in: hFindFile=0x555d60, lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65ff6580, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x65ff6580, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x65ff6580, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x545568, dwReserved1=0x470, cFileName="@@_OpenTheBrowserTOR_@@.html", cAlternateFileName="@@_OPE~1.HTM")) returned 1 [0030.806] FindNextFileA (in: hFindFile=0x555d60, lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65ff6580, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x65ff6580, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x65ff6580, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x530000, dwReserved1=0x553288, cFileName="@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html", cAlternateFileName="@@____~1.HTM")) returned 1 [0030.806] FindNextFileA (in: hFindFile=0x555d60, lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x723f8e00, ftCreationTime.dwHighDateTime=0x1c2e156, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x723f8e00, ftLastWriteTime.dwHighDateTime=0x1c2e156, nFileSizeHigh=0x0, nFileSizeLow=0xfa60, dwReserved0=0x38bda8, dwReserved1=0x77163c74, cFileName="EEINTL.DLL", cAlternateFileName="")) returned 1 [0030.806] FindNextFileA (in: hFindFile=0x555d60, lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x723f8e00, ftCreationTime.dwHighDateTime=0x1c2e156, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x723f8e00, ftLastWriteTime.dwHighDateTime=0x1c2e156, nFileSizeHigh=0x0, nFileSizeLow=0xfa60, dwReserved0=0x38bda8, dwReserved1=0x77163c74, cFileName="EEINTL.DLL", cAlternateFileName="")) returned 0 [0030.806] FindClose (in: hFindFile=0x555d60 | out: hFindFile=0x555d60) returned 1 [0030.806] FindNextFileA (in: hFindFile=0x555d20, lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65ff6580, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x65ff6580, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x65ff6580, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x73000271, dwReserved1=0xf9, cFileName="@@_OpenTheBrowserTOR_@@.html", cAlternateFileName="@@_OPE~1.HTM")) returned 1 [0030.807] FindNextFileA (in: hFindFile=0x555d20, lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65ff6580, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x65ff6580, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x65ff6580, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x530000, dwReserved1=0x553288, cFileName="@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html", cAlternateFileName="@@____~1.HTM")) returned 1 [0030.807] FindNextFileA (in: hFindFile=0x555d20, lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d107e00, ftCreationTime.dwHighDateTime=0x1bb541c, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x5d107e00, ftLastWriteTime.dwHighDateTime=0x1bb541c, nFileSizeHigh=0x0, nFileSizeLow=0x9fd, dwReserved0=0x38c70c, dwReserved1=0x77163c74, cFileName="EQNEDT32.CNT", cAlternateFileName="")) returned 1 [0030.807] FindNextFileA (in: hFindFile=0x555d20, lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28305200, ftCreationTime.dwHighDateTime=0x1c2f1c2, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x28305200, ftLastWriteTime.dwHighDateTime=0x1c2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x84a48, dwReserved0=0x530000, dwReserved1=0x553288, cFileName="EQNEDT32.EXE", cAlternateFileName="")) returned 1 [0030.807] FindNextFileA (in: hFindFile=0x555d20, lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3acd3b00, ftCreationTime.dwHighDateTime=0x1c6cca0, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x3acd3b00, ftLastWriteTime.dwHighDateTime=0x1c6cca0, nFileSizeHigh=0x0, nFileSizeLow=0x236, dwReserved0=0x530000, dwReserved1=0x553288, cFileName="eqnedt32.exe.manifest", cAlternateFileName="EQNEDT~1.MAN")) returned 1 [0030.807] FindNextFileA (in: hFindFile=0x555d20, lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bd0200, ftCreationTime.dwHighDateTime=0x1be1298, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x3bd0200, ftLastWriteTime.dwHighDateTime=0x1be1298, nFileSizeHigh=0x0, nFileSizeLow=0x2b0b7, dwReserved0=0x530000, dwReserved1=0x553288, cFileName="EQNEDT32.HLP", cAlternateFileName="")) returned 1 [0030.807] FindNextFileA (in: hFindFile=0x555d20, lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95fd7600, ftCreationTime.dwHighDateTime=0x1bc9dc7, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x95fd7600, ftLastWriteTime.dwHighDateTime=0x1bc9dc7, nFileSizeHigh=0x0, nFileSizeLow=0x1de8, dwReserved0=0x530000, dwReserved1=0x553288, cFileName="MTEXTRA.TTF", cAlternateFileName="")) returned 1 [0030.807] FindNextFileA (in: hFindFile=0x555d20, lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95fd7600, ftCreationTime.dwHighDateTime=0x1bc9dc7, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x95fd7600, ftLastWriteTime.dwHighDateTime=0x1bc9dc7, nFileSizeHigh=0x0, nFileSizeLow=0x1de8, dwReserved0=0x530000, dwReserved1=0x553288, cFileName="MTEXTRA.TTF", cAlternateFileName="")) returned 0 [0030.807] FindClose (in: hFindFile=0x555d20 | out: hFindFile=0x555d20) returned 1 [0030.807] FindNextFileA (in: hFindFile=0x555ce0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58c7d970, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x58c7d970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x58c7d970, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x38d070, dwReserved1=0x77163c74, cFileName="EURO", cAlternateFileName="")) returned 1 [0030.807] AreFileApisANSI () returned 1 [0030.807] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x547a90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 82 [0030.809] AreFileApisANSI () returned 1 [0030.809] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x547a90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 87 [0030.811] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\EURO\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58c7d970, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6601c6e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x6601c6e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0030.812] FindNextFileA (in: hFindFile=0x555d20, lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58c7d970, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6601c6e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x6601c6e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName="..", cAlternateFileName="")) returned 1 [0030.812] FindNextFileA (in: hFindFile=0x555d20, lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65ff6580, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x65ff6580, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x6601c6e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x545568, dwReserved1=0x80, cFileName="@@_OpenTheBrowserTOR_@@.html", cAlternateFileName="@@_OPE~1.HTM")) returned 1 [0030.812] FindNextFileA (in: hFindFile=0x555d20, lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6601c6e0, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x6601c6e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x6601c6e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x530000, dwReserved1=0x553288, cFileName="@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html", cAlternateFileName="@@____~1.HTM")) returned 1 [0030.812] FindNextFileA (in: hFindFile=0x555d20, lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b4ffc00, ftCreationTime.dwHighDateTime=0x1cac1f6, ftLastAccessTime.dwLowDateTime=0x58c7d970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6b4ffc00, ftLastWriteTime.dwHighDateTime=0x1cac1f6, nFileSizeHigh=0x0, nFileSizeLow=0x7980, dwReserved0=0x38c70c, dwReserved1=0x77163c74, cFileName="MSOEURO.DLL", cAlternateFileName="")) returned 1 [0030.812] FindNextFileA (in: hFindFile=0x555d20, lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b4ffc00, ftCreationTime.dwHighDateTime=0x1cac1f6, ftLastAccessTime.dwLowDateTime=0x58c7d970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6b4ffc00, ftLastWriteTime.dwHighDateTime=0x1cac1f6, nFileSizeHigh=0x0, nFileSizeLow=0x7980, dwReserved0=0x38c70c, dwReserved1=0x77163c74, cFileName="MSOEURO.DLL", cAlternateFileName="")) returned 0 [0030.812] FindClose (in: hFindFile=0x555d20 | out: hFindFile=0x555d20) returned 1 [0030.812] FindNextFileA (in: hFindFile=0x555ce0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5969b6f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd9df3dc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd9df3dc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x38d070, dwReserved1=0x77163c74, cFileName="Filters", cAlternateFileName="")) returned 1 [0030.812] AreFileApisANSI () returned 1 [0030.812] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x547a90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 85 [0030.814] AreFileApisANSI () returned 1 [0030.814] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x547a90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 90 [0030.817] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\Filters\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5969b6f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6601c6e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x6601c6e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0030.817] FindNextFileA (in: hFindFile=0x555d20, lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5969b6f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6601c6e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x6601c6e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName="..", cAlternateFileName="")) returned 1 [0030.817] FindNextFileA (in: hFindFile=0x555d20, lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6601c6e0, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x6601c6e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x6601c6e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x545568, dwReserved1=0x80, cFileName="@@_OpenTheBrowserTOR_@@.html", cAlternateFileName="@@_OPE~1.HTM")) returned 1 [0030.817] FindNextFileA (in: hFindFile=0x555d20, lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6601c6e0, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x6601c6e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x6601c6e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x530000, dwReserved1=0x553288, cFileName="@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html", cAlternateFileName="@@____~1.HTM")) returned 1 [0030.817] FindNextFileA (in: hFindFile=0x555d20, lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e922100, ftCreationTime.dwHighDateTime=0x1caafc8, ftLastAccessTime.dwLowDateTime=0x69e61cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4e922100, ftLastWriteTime.dwHighDateTime=0x1caafc8, nFileSizeHigh=0x0, nFileSizeLow=0x9770, dwReserved0=0x38c70c, dwReserved1=0x77163c74, cFileName="msgfilt.dll", cAlternateFileName="")) returned 1 [0030.817] FindNextFileA (in: hFindFile=0x555d20, lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e922100, ftCreationTime.dwHighDateTime=0x1caafc8, ftLastAccessTime.dwLowDateTime=0x6b29d7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4e922100, ftLastWriteTime.dwHighDateTime=0x1caafc8, nFileSizeHigh=0x0, nFileSizeLow=0x140790, dwReserved0=0x530000, dwReserved1=0x553288, cFileName="odffilt.dll", cAlternateFileName="")) returned 1 [0030.817] FindNextFileA (in: hFindFile=0x555d20, lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e922100, ftCreationTime.dwHighDateTime=0x1caafc8, ftLastAccessTime.dwLowDateTime=0x596c1850, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4e922100, ftLastWriteTime.dwHighDateTime=0x1caafc8, nFileSizeHigh=0x0, nFileSizeLow=0x16af90, dwReserved0=0x530000, dwReserved1=0x553288, cFileName="offfiltx.dll", cAlternateFileName="")) returned 1 [0030.817] FindNextFileA (in: hFindFile=0x555d20, lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46d35b00, ftCreationTime.dwHighDateTime=0x1cba077, ftLastAccessTime.dwLowDateTime=0xd9e40080, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x46d35b00, ftLastWriteTime.dwHighDateTime=0x1cba077, nFileSizeHigh=0x0, nFileSizeLow=0x206b78, dwReserved0=0x530000, dwReserved1=0x553288, cFileName="VISFILT.DLL", cAlternateFileName="")) returned 1 [0030.817] FindNextFileA (in: hFindFile=0x555d20, lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46d35b00, ftCreationTime.dwHighDateTime=0x1cba077, ftLastAccessTime.dwLowDateTime=0xd9e40080, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x46d35b00, ftLastWriteTime.dwHighDateTime=0x1cba077, nFileSizeHigh=0x0, nFileSizeLow=0x206b78, dwReserved0=0x530000, dwReserved1=0x553288, cFileName="VISFILT.DLL", cAlternateFileName="")) returned 0 [0030.817] FindClose (in: hFindFile=0x555d20 | out: hFindFile=0x555d20) returned 1 [0030.818] FindNextFileA (in: hFindFile=0x555ce0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc25b4860, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc25b4860, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x38d070, dwReserved1=0x77163c74, cFileName="GRPHFLT", cAlternateFileName="")) returned 1 [0030.818] AreFileApisANSI () returned 1 [0030.818] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x547a90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 85 [0030.821] AreFileApisANSI () returned 1 [0030.821] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x547a90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 90 [0030.822] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x6601c6e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x6601c6e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0030.822] FindNextFileA (in: hFindFile=0x555d20, lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x6601c6e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x6601c6e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName="..", cAlternateFileName="")) returned 1 [0030.822] FindNextFileA (in: hFindFile=0x555d20, lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6601c6e0, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x6601c6e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x6601c6e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x545568, dwReserved1=0x80, cFileName="@@_OpenTheBrowserTOR_@@.html", cAlternateFileName="@@_OPE~1.HTM")) returned 1 [0030.823] FindNextFileA (in: hFindFile=0x555d20, lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6601c6e0, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x6601c6e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x6601c6e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x530000, dwReserved1=0x553288, cFileName="@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html", cAlternateFileName="@@____~1.HTM")) returned 1 [0030.823] FindNextFileA (in: hFindFile=0x555d20, lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeec79e70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x1a9b, dwReserved0=0x38c70c, dwReserved1=0x77163c74, cFileName="CGMIMP32.CFG", cAlternateFileName="")) returned 1 [0030.823] AreFileApisANSI () returned 1 [0030.823] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38cdc4, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 69 [0030.832] AreFileApisANSI () returned 1 [0030.833] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38cdc4, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 69 [0030.833] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x553290, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0030.833] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\cgmimp32.cfg"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\cgmimp32.cfg.masked"), dwFlags=0x2) returned 1 [0030.833] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5532e8 | out: hHeap=0x530000) returned 1 [0030.833] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x553290 | out: hHeap=0x530000) returned 1 [0030.833] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0030.833] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0030.833] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0030.833] FindNextFileA (in: hFindFile=0x555d20, lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfda4ec00, ftCreationTime.dwHighDateTime=0x1cba021, ftLastAccessTime.dwLowDateTime=0xc22488c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xfda4ec00, ftLastWriteTime.dwHighDateTime=0x1cba021, nFileSizeHigh=0x0, nFileSizeLow=0x4f160, dwReserved0=0x552e90, dwReserved1=0x1, cFileName="CGMIMP32.FLT", cAlternateFileName="")) returned 1 [0030.834] FindNextFileA (in: hFindFile=0x555d20, lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeec79e70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x93f6e, dwReserved0=0x530000, dwReserved1=0x553288, cFileName="CGMIMP32.FNT", cAlternateFileName="")) returned 1 [0030.834] FindNextFileA (in: hFindFile=0x555d20, lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8a19600, ftCreationTime.dwHighDateTime=0x1caa4ff, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8a19600, ftLastWriteTime.dwHighDateTime=0x1caa4ff, nFileSizeHigh=0x0, nFileSizeLow=0xadf90, dwReserved0=0x530000, dwReserved1=0x553288, cFileName="EPSIMP32.FLT", cAlternateFileName="")) returned 1 [0030.834] FindNextFileA (in: hFindFile=0x555d20, lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8a19600, ftCreationTime.dwHighDateTime=0x1caa4ff, ftLastAccessTime.dwLowDateTime=0xeedd0ad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8a19600, ftLastWriteTime.dwHighDateTime=0x1caa4ff, nFileSizeHigh=0x0, nFileSizeLow=0x4e380, dwReserved0=0x530000, dwReserved1=0x553288, cFileName="GIFIMP32.FLT", cAlternateFileName="")) returned 1 [0030.834] FindNextFileA (in: hFindFile=0x555d20, lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8a19600, ftCreationTime.dwHighDateTime=0x1caa4ff, ftLastAccessTime.dwLowDateTime=0xeee1cd90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8a19600, ftLastWriteTime.dwHighDateTime=0x1caa4ff, nFileSizeHigh=0x0, nFileSizeLow=0x3ad80, dwReserved0=0x530000, dwReserved1=0x553288, cFileName="JPEGIM32.FLT", cAlternateFileName="")) returned 1 [0030.834] FindNextFileA (in: hFindFile=0x555d20, lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x774, dwReserved0=0x530000, dwReserved1=0x553288, cFileName="MS.CGM", cAlternateFileName="")) returned 1 [0030.834] AreFileApisANSI () returned 1 [0030.834] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38cdc4, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0030.838] AreFileApisANSI () returned 1 [0030.838] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38cdc4, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0030.838] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x547a90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 70 [0030.838] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.cgm"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.cgm.masked"), dwFlags=0x2) returned 1 [0030.838] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x553290 | out: hHeap=0x530000) returned 1 [0030.838] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0030.838] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548358 | out: hHeap=0x530000) returned 1 [0030.838] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0030.838] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0030.839] FindNextFileA (in: hFindFile=0x555d20, lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x3adb, dwReserved0=0x552e90, dwReserved1=0x1, cFileName="MS.EPS", cAlternateFileName="")) returned 1 [0030.839] AreFileApisANSI () returned 1 [0030.839] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38cdc4, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0030.856] AreFileApisANSI () returned 1 [0030.856] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38cdc4, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0030.856] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x547a90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 70 [0030.856] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.eps"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.eps.masked"), dwFlags=0x2) returned 1 [0030.857] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x553290 | out: hHeap=0x530000) returned 1 [0030.857] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0030.857] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548358 | out: hHeap=0x530000) returned 1 [0030.857] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0030.857] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0030.857] FindNextFileA (in: hFindFile=0x555d20, lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x42d, dwReserved0=0x552e90, dwReserved1=0x1, cFileName="MS.GIF", cAlternateFileName="")) returned 1 [0030.857] AreFileApisANSI () returned 1 [0030.857] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38cdc4, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0030.860] AreFileApisANSI () returned 1 [0030.860] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38cdc4, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0030.860] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x547a90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 70 [0030.860] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.gif"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.gif.masked"), dwFlags=0x2) returned 1 [0030.861] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x553290 | out: hHeap=0x530000) returned 1 [0030.861] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0030.861] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548358 | out: hHeap=0x530000) returned 1 [0030.861] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0030.861] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0030.861] FindNextFileA (in: hFindFile=0x555d20, lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x425, dwReserved0=0x552e90, dwReserved1=0x1, cFileName="MS.JPG", cAlternateFileName="")) returned 1 [0030.861] AreFileApisANSI () returned 1 [0030.861] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38cdc4, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0030.865] AreFileApisANSI () returned 1 [0030.865] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38cdc4, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0030.865] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x547a90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 70 [0030.865] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.jpg"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.jpg.masked"), dwFlags=0x2) returned 1 [0030.865] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x553290 | out: hHeap=0x530000) returned 1 [0030.865] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0030.865] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548358 | out: hHeap=0x530000) returned 1 [0030.865] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0030.865] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0030.866] FindNextFileA (in: hFindFile=0x555d20, lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x692, dwReserved0=0x552e90, dwReserved1=0x1, cFileName="MS.PNG", cAlternateFileName="")) returned 1 [0030.866] AreFileApisANSI () returned 1 [0030.866] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38cdc4, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0030.869] AreFileApisANSI () returned 1 [0030.869] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38cdc4, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0030.869] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x547a90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 70 [0030.869] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.png"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.png.masked"), dwFlags=0x2) returned 1 [0030.870] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x553290 | out: hHeap=0x530000) returned 1 [0030.870] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0030.870] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548358 | out: hHeap=0x530000) returned 1 [0030.870] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0030.870] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0030.870] FindNextFileA (in: hFindFile=0x555d20, lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x566, dwReserved0=0x552e90, dwReserved1=0x1, cFileName="MS.WPG", cAlternateFileName="")) returned 1 [0030.870] FindNextFileA (in: hFindFile=0x555d20, lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8a19600, ftCreationTime.dwHighDateTime=0x1caa4ff, ftLastAccessTime.dwLowDateTime=0xeefe5e10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8a19600, ftLastWriteTime.dwHighDateTime=0x1caa4ff, nFileSizeHigh=0x0, nFileSizeLow=0x11d78, dwReserved0=0x552e90, dwReserved1=0x1, cFileName="PICTIM32.FLT", cAlternateFileName="")) returned 1 [0030.870] FindNextFileA (in: hFindFile=0x555d20, lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8a19600, ftCreationTime.dwHighDateTime=0x1caa4ff, ftLastAccessTime.dwLowDateTime=0xeefe5e10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8a19600, ftLastWriteTime.dwHighDateTime=0x1caa4ff, nFileSizeHigh=0x0, nFileSizeLow=0x49f80, dwReserved0=0x530000, dwReserved1=0x553288, cFileName="PNG32.FLT", cAlternateFileName="")) returned 1 [0030.870] FindNextFileA (in: hFindFile=0x555d20, lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd53d4900, ftCreationTime.dwHighDateTime=0x1cb7002, ftLastAccessTime.dwLowDateTime=0xc25b4860, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd53d4900, ftLastWriteTime.dwHighDateTime=0x1cb7002, nFileSizeHigh=0x0, nFileSizeLow=0x44780, dwReserved0=0x530000, dwReserved1=0x553288, cFileName="WPGIMP32.FLT", cAlternateFileName="")) returned 1 [0030.870] FindNextFileA (in: hFindFile=0x555d20, lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd53d4900, ftCreationTime.dwHighDateTime=0x1cb7002, ftLastAccessTime.dwLowDateTime=0xc25b4860, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd53d4900, ftLastWriteTime.dwHighDateTime=0x1cb7002, nFileSizeHigh=0x0, nFileSizeLow=0x44780, dwReserved0=0x530000, dwReserved1=0x553288, cFileName="WPGIMP32.FLT", cAlternateFileName="")) returned 0 [0030.871] FindClose (in: hFindFile=0x555d20 | out: hFindFile=0x555d20) returned 1 [0030.871] FindNextFileA (in: hFindFile=0x555ce0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x61073d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61073d10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x38d070, dwReserved1=0x77163c74, cFileName="Help", cAlternateFileName="")) returned 1 [0030.871] AreFileApisANSI () returned 1 [0030.871] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x547a90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 82 [0030.872] AreFileApisANSI () returned 1 [0030.872] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x547a90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 87 [0030.875] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\Help\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x660b4c60, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x660b4c60, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0030.875] FindNextFileA (in: hFindFile=0x555d20, lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x660b4c60, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x660b4c60, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName="..", cAlternateFileName="")) returned 1 [0030.875] FindNextFileA (in: hFindFile=0x555d20, lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x660b4c60, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x660b4c60, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x660b4c60, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x545568, dwReserved1=0x80, cFileName="@@_OpenTheBrowserTOR_@@.html", cAlternateFileName="@@_OPE~1.HTM")) returned 1 [0030.876] FindNextFileA (in: hFindFile=0x555d20, lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x660b4c60, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x660b4c60, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x660b4c60, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x530000, dwReserved1=0x553288, cFileName="@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html", cAlternateFileName="@@____~1.HTM")) returned 1 [0030.876] FindNextFileA (in: hFindFile=0x555d20, lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe777f900, ftCreationTime.dwHighDateTime=0x1c8bc89, ftLastAccessTime.dwLowDateTime=0x60d54030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe777f900, ftLastWriteTime.dwHighDateTime=0x1c8bc89, nFileSizeHigh=0x0, nFileSizeLow=0x133200, dwReserved0=0x38c70c, dwReserved1=0x77163c74, cFileName="hxds.dll", cAlternateFileName="")) returned 1 [0030.876] FindNextFileA (in: hFindFile=0x555d20, lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3e47200, ftCreationTime.dwHighDateTime=0x1c8bc89, ftLastAccessTime.dwLowDateTime=0x522dc930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe3e47200, ftLastWriteTime.dwHighDateTime=0x1c8bc89, nFileSizeHigh=0x0, nFileSizeLow=0x1bf200, dwReserved0=0x38c70c, dwReserved1=0x77163c74, cFileName="ITIRCL55.DLL", cAlternateFileName="")) returned 1 [0030.876] FindNextFileA (in: hFindFile=0x555d20, lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe777f900, ftCreationTime.dwHighDateTime=0x1c8bc89, ftLastAccessTime.dwLowDateTime=0x616b36d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe777f900, ftLastWriteTime.dwHighDateTime=0x1c8bc89, nFileSizeHigh=0x0, nFileSizeLow=0x69000, dwReserved0=0x530000, dwReserved1=0x553288, cFileName="msitss55.dll", cAlternateFileName="")) returned 1 [0030.876] FindNextFileA (in: hFindFile=0x555d20, lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe777f900, ftCreationTime.dwHighDateTime=0x1c8bc89, ftLastAccessTime.dwLowDateTime=0x616b36d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe777f900, ftLastWriteTime.dwHighDateTime=0x1c8bc89, nFileSizeHigh=0x0, nFileSizeLow=0x69000, dwReserved0=0x530000, dwReserved1=0x553288, cFileName="msitss55.dll", cAlternateFileName="")) returned 0 [0030.876] FindClose (in: hFindFile=0x555d20 | out: hFindFile=0x555d20) returned 1 [0030.876] FindNextFileA (in: hFindFile=0x555ce0, lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e0df36a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x38d070, dwReserved1=0x77163c74, cFileName="ink", cAlternateFileName="")) returned 1 [0030.876] AreFileApisANSI () returned 1 [0030.876] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x547a90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0030.877] AreFileApisANSI () returned 1 [0030.877] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x547a90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 86 [0030.878] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x660b4c60, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x660b4c60, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0030.879] FindNextFileA (in: hFindFile=0x555d20, lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x660b4c60, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x660b4c60, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName="..", cAlternateFileName="")) returned 1 [0030.879] FindNextFileA (in: hFindFile=0x555d20, lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x660b4c60, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x660b4c60, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x660b4c60, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x545568, dwReserved1=0x80, cFileName="@@_OpenTheBrowserTOR_@@.html", cAlternateFileName="@@_OPE~1.HTM")) returned 1 [0030.879] FindNextFileA (in: hFindFile=0x555d20, lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x660b4c60, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x660b4c60, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x660b4c60, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x530000, dwReserved1=0x553288, cFileName="@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html", cAlternateFileName="@@____~1.HTM")) returned 1 [0030.879] FindNextFileA (in: hFindFile=0x555d20, lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c2bbccc, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x6c2bbccc, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x90daefa5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc1486, dwReserved0=0x38c70c, dwReserved1=0x77163c74, cFileName="Alphabet.xml", cAlternateFileName="")) returned 1 [0030.879] AreFileApisANSI () returned 1 [0030.879] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38cdc4, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 65 [0030.880] FindNextFileA (in: hFindFile=0x555d20, lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7545b2, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7545b2, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x552e90, dwReserved1=0x1, cFileName="ar-SA", cAlternateFileName="")) returned 1 [0030.880] AreFileApisANSI () returned 1 [0030.880] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x547a90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 87 [0030.882] AreFileApisANSI () returned 1 [0030.882] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x547a90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 92 [0030.884] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\ar-SA\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x660b4c60, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x660b4c60, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0030.884] FindNextFileA (in: hFindFile=0x555d60, lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x660b4c60, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x660b4c60, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName="..", cAlternateFileName="")) returned 1 [0030.884] FindNextFileA (in: hFindFile=0x555d60, lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x660b4c60, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x660b4c60, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x660b4c60, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x545568, dwReserved1=0x80, cFileName="@@_OpenTheBrowserTOR_@@.html", cAlternateFileName="@@_OPE~1.HTM")) returned 1 [0030.885] FindNextFileA (in: hFindFile=0x555d60, lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x660b4c60, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x660b4c60, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x660b4c60, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x530000, dwReserved1=0x553288, cFileName="@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html", cAlternateFileName="@@____~1.HTM")) returned 1 [0030.885] FindNextFileA (in: hFindFile=0x555d60, lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe846a08f, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe86330eb, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe8659248, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x38bda8, dwReserved1=0x77163c74, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0030.885] FindNextFileA (in: hFindFile=0x555d60, lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe846a08f, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe86330eb, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe8659248, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x38bda8, dwReserved1=0x77163c74, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0030.885] FindClose (in: hFindFile=0x555d60 | out: hFindFile=0x555d60) returned 1 [0030.885] FindNextFileA (in: hFindFile=0x555d20, lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7545b2, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7545b2, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x552e90, dwReserved1=0x1, cFileName="bg-BG", cAlternateFileName="")) returned 1 [0030.885] AreFileApisANSI () returned 1 [0030.885] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x547a90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 87 [0030.886] AreFileApisANSI () returned 1 [0030.886] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x547a90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 92 [0030.888] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\bg-BG\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x660dadc0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x660dadc0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0030.888] FindNextFileA (in: hFindFile=0x555d60, lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x660dadc0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x660dadc0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName="..", cAlternateFileName="")) returned 1 [0030.888] FindNextFileA (in: hFindFile=0x555d60, lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x660b4c60, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x660b4c60, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x660dadc0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x545568, dwReserved1=0x80, cFileName="@@_OpenTheBrowserTOR_@@.html", cAlternateFileName="@@_OPE~1.HTM")) returned 1 [0030.888] FindNextFileA (in: hFindFile=0x555d60, lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x660dadc0, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x660dadc0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x660dadc0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x530000, dwReserved1=0x553288, cFileName="@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html", cAlternateFileName="@@____~1.HTM")) returned 1 [0030.888] FindNextFileA (in: hFindFile=0x555d60, lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea1207ac, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xea335ac2, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xea35bc1f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x38bda8, dwReserved1=0x77163c74, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0030.889] FindNextFileA (in: hFindFile=0x555d60, lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea1207ac, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xea335ac2, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xea35bc1f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x38bda8, dwReserved1=0x77163c74, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0030.889] FindClose (in: hFindFile=0x555d60 | out: hFindFile=0x555d60) returned 1 [0030.889] FindNextFileA (in: hFindFile=0x555d20, lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90daefa5, ftCreationTime.dwHighDateTime=0x1c9ea0f, ftLastAccessTime.dwLowDateTime=0x90daefa5, ftLastAccessTime.dwHighDateTime=0x1c9ea0f, ftLastWriteTime.dwLowDateTime=0x90daefa5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x69a5, dwReserved0=0x552e90, dwReserved1=0x1, cFileName="Content.xml", cAlternateFileName="")) returned 1 [0030.889] AreFileApisANSI () returned 1 [0030.889] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38cdc4, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 64 [0030.889] FindNextFileA (in: hFindFile=0x555d20, lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c92176b, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x6c92176b, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xdd6ec0f0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2f200, dwReserved0=0x552e90, dwReserved1=0x1, cFileName="ConvertInkStore.exe", cAlternateFileName="")) returned 1 [0030.889] FindNextFileA (in: hFindFile=0x555d20, lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x530000, dwReserved1=0x553288, cFileName="cs-CZ", cAlternateFileName="")) returned 1 [0030.889] AreFileApisANSI () returned 1 [0030.889] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x547a90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 87 [0030.890] AreFileApisANSI () returned 1 [0030.890] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x547a90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 92 [0030.892] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\cs-CZ\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x660dadc0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x660dadc0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0030.892] FindNextFileA (in: hFindFile=0x555d60, lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x660dadc0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x660dadc0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName="..", cAlternateFileName="")) returned 1 [0030.892] FindNextFileA (in: hFindFile=0x555d60, lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x660dadc0, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x660dadc0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x660dadc0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x545568, dwReserved1=0x80, cFileName="@@_OpenTheBrowserTOR_@@.html", cAlternateFileName="@@_OPE~1.HTM")) returned 1 [0030.892] FindNextFileA (in: hFindFile=0x555d60, lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x660dadc0, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x660dadc0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x660dadc0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x530000, dwReserved1=0x553288, cFileName="@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html", cAlternateFileName="@@____~1.HTM")) returned 1 [0030.892] FindNextFileA (in: hFindFile=0x555d60, lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6ce8929, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe6f23d9c, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe6f23d9c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x38bda8, dwReserved1=0x77163c74, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0030.892] FindNextFileA (in: hFindFile=0x555d60, lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6ce8929, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe6f23d9c, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe6f23d9c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x38bda8, dwReserved1=0x77163c74, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0030.892] FindClose (in: hFindFile=0x555d60 | out: hFindFile=0x555d60) returned 1 [0030.892] FindNextFileA (in: hFindFile=0x555d20, lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x530000, dwReserved1=0x553288, cFileName="da-DK", cAlternateFileName="")) returned 1 [0030.892] AreFileApisANSI () returned 1 [0030.892] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x547a90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 87 [0030.894] AreFileApisANSI () returned 1 [0030.894] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x547a90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 92 [0030.897] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\da-DK\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x660dadc0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x660dadc0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0030.898] FindNextFileA (in: hFindFile=0x555d60, lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x660dadc0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x660dadc0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName="..", cAlternateFileName="")) returned 1 [0030.898] FindNextFileA (in: hFindFile=0x555d60, lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x660dadc0, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x660dadc0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x660dadc0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x545568, dwReserved1=0x80, cFileName="@@_OpenTheBrowserTOR_@@.html", cAlternateFileName="@@_OPE~1.HTM")) returned 1 [0030.898] FindNextFileA (in: hFindFile=0x555d60, lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x660dadc0, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x660dadc0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x660dadc0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x530000, dwReserved1=0x553288, cFileName="@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html", cAlternateFileName="@@____~1.HTM")) returned 1 [0030.898] FindNextFileA (in: hFindFile=0x555d60, lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6fbc310, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe71ab4c9, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe71d1626, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x38bda8, dwReserved1=0x77163c74, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0030.898] FindNextFileA (in: hFindFile=0x555d60, lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6fbc310, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe71ab4c9, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe71d1626, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x38bda8, dwReserved1=0x77163c74, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0030.898] FindClose (in: hFindFile=0x555d60 | out: hFindFile=0x555d60) returned 1 [0030.898] FindNextFileA (in: hFindFile=0x555d20, lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x530000, dwReserved1=0x553288, cFileName="de-DE", cAlternateFileName="")) returned 1 [0030.898] AreFileApisANSI () returned 1 [0030.898] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x547a90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 87 [0030.901] AreFileApisANSI () returned 1 [0030.901] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x547a90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 92 [0030.902] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\de-DE\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x660dadc0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x660dadc0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0030.903] FindNextFileA (in: hFindFile=0x555d60, lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x660dadc0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x660dadc0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName="..", cAlternateFileName="")) returned 1 [0030.903] FindNextFileA (in: hFindFile=0x555d60, lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x660dadc0, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x660dadc0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x660dadc0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x545568, dwReserved1=0x80, cFileName="@@_OpenTheBrowserTOR_@@.html", cAlternateFileName="@@_OPE~1.HTM")) returned 1 [0030.903] FindNextFileA (in: hFindFile=0x555d60, lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x660dadc0, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x660dadc0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x66100f20, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x530000, dwReserved1=0x553288, cFileName="@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html", cAlternateFileName="@@____~1.HTM")) returned 1 [0030.903] FindNextFileA (in: hFindFile=0x555d60, lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe728fcf7, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe74cb16a, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe74cb16a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x38bda8, dwReserved1=0x77163c74, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0030.903] FindNextFileA (in: hFindFile=0x555d60, lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe728fcf7, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe74cb16a, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe74cb16a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x38bda8, dwReserved1=0x77163c74, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0030.903] FindClose (in: hFindFile=0x555d60 | out: hFindFile=0x555d60) returned 1 [0030.903] FindNextFileA (in: hFindFile=0x555d20, lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x530000, dwReserved1=0x553288, cFileName="el-GR", cAlternateFileName="")) returned 1 [0030.903] AreFileApisANSI () returned 1 [0030.903] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x547a90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 87 [0030.904] AreFileApisANSI () returned 1 [0030.904] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x547a90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 92 [0030.906] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\el-GR\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x66100f20, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x66100f20, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0030.907] FindNextFileA (in: hFindFile=0x555d60, lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x66100f20, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x66100f20, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName="..", cAlternateFileName="")) returned 1 [0030.907] FindNextFileA (in: hFindFile=0x555d60, lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66100f20, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x66100f20, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x66100f20, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x545568, dwReserved1=0x80, cFileName="@@_OpenTheBrowserTOR_@@.html", cAlternateFileName="@@_OPE~1.HTM")) returned 1 [0030.907] FindNextFileA (in: hFindFile=0x555d60, lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66100f20, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x66100f20, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x66100f20, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x530000, dwReserved1=0x553288, cFileName="@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html", cAlternateFileName="@@____~1.HTM")) returned 1 [0030.907] FindNextFileA (in: hFindFile=0x555d60, lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe31667d9, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe337baef, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe337baef, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x38bda8, dwReserved1=0x77163c74, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0030.907] FindNextFileA (in: hFindFile=0x555d60, lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe31667d9, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe337baef, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe337baef, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x38bda8, dwReserved1=0x77163c74, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0030.907] FindClose (in: hFindFile=0x555d60 | out: hFindFile=0x555d60) returned 1 [0030.907] FindNextFileA (in: hFindFile=0x555d20, lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e0df36a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x530000, dwReserved1=0x553288, cFileName="en-US", cAlternateFileName="")) returned 1 [0030.907] AreFileApisANSI () returned 1 [0030.907] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x547a90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 87 [0030.910] AreFileApisANSI () returned 1 [0030.910] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x547a90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 92 [0030.911] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x66100f20, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x66100f20, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0030.911] FindNextFileA (in: hFindFile=0x555d60, lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x66100f20, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x66100f20, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName="..", cAlternateFileName="")) returned 1 [0030.911] FindNextFileA (in: hFindFile=0x555d60, lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66100f20, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x66100f20, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x66100f20, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x545568, dwReserved1=0x80, cFileName="@@_OpenTheBrowserTOR_@@.html", cAlternateFileName="@@_OPE~1.HTM")) returned 1 [0030.911] FindNextFileA (in: hFindFile=0x555d60, lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66100f20, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x66100f20, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x66100f20, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x530000, dwReserved1=0x553288, cFileName="@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html", cAlternateFileName="@@____~1.HTM")) returned 1 [0030.911] FindNextFileA (in: hFindFile=0x555d60, lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a407849, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x9a407849, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x9a407849, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x15e00, dwReserved0=0x38bda8, dwReserved1=0x77163c74, cFileName="boxed-correct.avi", cAlternateFileName="")) returned 1 [0030.911] AreFileApisANSI () returned 1 [0030.911] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38c460, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0030.912] FindNextFileA (in: hFindFile=0x555d60, lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23b3de0, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x23b3de0, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a49fdc1, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x7c00, dwReserved0=0x552e90, dwReserved1=0x1, cFileName="boxed-delete.avi", cAlternateFileName="")) returned 1 [0030.912] AreFileApisANSI () returned 1 [0030.912] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38c460, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 75 [0030.912] FindNextFileA (in: hFindFile=0x555d60, lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23d9f3d, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x23d9f3d, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a4c5f1f, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x8200, dwReserved0=0x552e90, dwReserved1=0x1, cFileName="boxed-join.avi", cAlternateFileName="")) returned 1 [0030.912] AreFileApisANSI () returned 1 [0030.912] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38c460, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 73 [0030.913] FindNextFileA (in: hFindFile=0x555d60, lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24261f7, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x24261f7, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a538339, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xf600, dwReserved0=0x552e90, dwReserved1=0x1, cFileName="boxed-split.avi", cAlternateFileName="")) returned 1 [0030.913] AreFileApisANSI () returned 1 [0030.913] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38c460, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0030.913] FindNextFileA (in: hFindFile=0x555d60, lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x244c354, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x244c354, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a55e497, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x30200, dwReserved0=0x552e90, dwReserved1=0x1, cFileName="correct.avi", cAlternateFileName="")) returned 1 [0030.913] AreFileApisANSI () returned 1 [0030.913] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38c460, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 70 [0030.913] FindNextFileA (in: hFindFile=0x555d60, lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24be76b, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x24be76b, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a5845f5, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x36c00, dwReserved0=0x552e90, dwReserved1=0x1, cFileName="delete.avi", cAlternateFileName="")) returned 1 [0030.913] AreFileApisANSI () returned 1 [0030.913] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38c460, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 69 [0030.914] FindNextFileA (in: hFindFile=0x555d60, lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x552e90, dwReserved1=0x1, cFileName="FlickLearningWizard.exe.mui", cAlternateFileName="")) returned 1 [0030.914] FindNextFileA (in: hFindFile=0x555d60, lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc8723b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe067905, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xdc8723b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x530000, dwReserved1=0x553288, cFileName="InkObj.dll.mui", cAlternateFileName="")) returned 1 [0030.914] FindNextFileA (in: hFindFile=0x555d60, lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2400, dwReserved0=0x530000, dwReserved1=0x553288, cFileName="InkWatson.exe.mui", cAlternateFileName="")) returned 1 [0030.914] FindNextFileA (in: hFindFile=0x555d60, lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x530000, dwReserved1=0x553288, cFileName="InputPersonalization.exe.mui", cAlternateFileName="")) returned 1 [0030.914] FindNextFileA (in: hFindFile=0x555d60, lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x5800, dwReserved0=0x530000, dwReserved1=0x553288, cFileName="IPSEventLogMsg.dll.mui", cAlternateFileName="")) returned 1 [0030.914] FindNextFileA (in: hFindFile=0x555d60, lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x530000, dwReserved1=0x553288, cFileName="IpsMigrationPlugin.dll.mui", cAlternateFileName="")) returned 1 [0030.914] FindNextFileA (in: hFindFile=0x555d60, lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x250aa25, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x250aa25, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a5aa753, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x36400, dwReserved0=0x530000, dwReserved1=0x553288, cFileName="join.avi", cAlternateFileName="")) returned 1 [0030.914] AreFileApisANSI () returned 1 [0030.914] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38c460, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 67 [0030.914] FindNextFileA (in: hFindFile=0x555d60, lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x552e90, dwReserved1=0x1, cFileName="micaut.dll.mui", cAlternateFileName="")) returned 1 [0030.914] FindNextFileA (in: hFindFile=0x555d60, lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x530000, dwReserved1=0x553288, cFileName="mip.exe.mui", cAlternateFileName="")) returned 1 [0030.914] FindNextFileA (in: hFindFile=0x555d60, lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x530000, dwReserved1=0x553288, cFileName="mshwLatin.dll.mui", cAlternateFileName="")) returned 1 [0030.914] FindNextFileA (in: hFindFile=0x555d60, lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeca1847, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xf901a42, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xeca1847, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x530000, dwReserved1=0x553288, cFileName="rtscom.dll.mui", cAlternateFileName="")) returned 1 [0030.914] FindNextFileA (in: hFindFile=0x555d60, lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xaa00, dwReserved0=0x530000, dwReserved1=0x553288, cFileName="ShapeCollector.exe.mui", cAlternateFileName="")) returned 1 [0030.914] FindNextFileA (in: hFindFile=0x555d60, lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25c90f6, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x25c90f6, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a5d08b1, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2f600, dwReserved0=0x530000, dwReserved1=0x553288, cFileName="split.avi", cAlternateFileName="")) returned 1 [0030.914] AreFileApisANSI () returned 1 [0030.915] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38c460, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 68 [0030.915] FindNextFileA (in: hFindFile=0x555d60, lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa23a9ac, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xa5a884b, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xa23a9ac, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x552e90, dwReserved1=0x1, cFileName="tabskb.dll.mui", cAlternateFileName="")) returned 1 [0030.915] FindNextFileA (in: hFindFile=0x555d60, lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x530000, dwReserved1=0x553288, cFileName="TipBand.dll.mui", cAlternateFileName="")) returned 1 [0030.915] FindNextFileA (in: hFindFile=0x555d60, lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x530000, dwReserved1=0x553288, cFileName="TipRes.dll.mui", cAlternateFileName="")) returned 1 [0030.915] FindNextFileA (in: hFindFile=0x555d60, lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5cd75ed, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe5f38bbd, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe5f38bbd, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x530000, dwReserved1=0x553288, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0030.915] FindNextFileA (in: hFindFile=0x555d60, lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x530000, dwReserved1=0x553288, cFileName="TipTsf.dll.mui", cAlternateFileName="")) returned 1 [0030.915] FindNextFileA (in: hFindFile=0x555d60, lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x530000, dwReserved1=0x553288, cFileName="TipTsf.dll.mui", cAlternateFileName="")) returned 0 [0030.915] FindClose (in: hFindFile=0x555d60 | out: hFindFile=0x555d60) returned 1 [0030.915] FindNextFileA (in: hFindFile=0x555d20, lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x530000, dwReserved1=0x553288, cFileName="es-ES", cAlternateFileName="")) returned 1 [0030.915] AreFileApisANSI () returned 1 [0030.915] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x547a90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 87 [0030.916] AreFileApisANSI () returned 1 [0030.916] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x547a90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 92 [0030.918] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\es-ES\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x66100f20, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x66100f20, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0030.919] FindNextFileA (in: hFindFile=0x555d60, lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x66100f20, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x66100f20, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName="..", cAlternateFileName="")) returned 1 [0030.919] FindNextFileA (in: hFindFile=0x555d60, lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66100f20, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x66100f20, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x66100f20, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x545568, dwReserved1=0x80, cFileName="@@_OpenTheBrowserTOR_@@.html", cAlternateFileName="@@_OPE~1.HTM")) returned 1 [0030.919] FindNextFileA (in: hFindFile=0x555d60, lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66100f20, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x66100f20, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x66127080, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x530000, dwReserved1=0x553288, cFileName="@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html", cAlternateFileName="@@____~1.HTM")) returned 1 [0030.919] FindNextFileA (in: hFindFile=0x555d60, lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3f3c6a2, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe41519b8, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe41519b8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x38bda8, dwReserved1=0x77163c74, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0030.919] FindNextFileA (in: hFindFile=0x555d60, lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3f3c6a2, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe41519b8, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe41519b8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x38bda8, dwReserved1=0x77163c74, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0030.919] FindClose (in: hFindFile=0x555d60 | out: hFindFile=0x555d60) returned 1 [0030.919] FindNextFileA (in: hFindFile=0x555d20, lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x530000, dwReserved1=0x553288, cFileName="et-EE", cAlternateFileName="")) returned 1 [0030.919] AreFileApisANSI () returned 1 [0030.919] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x547a90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 87 [0030.921] AreFileApisANSI () returned 1 [0030.921] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x547a90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 92 [0030.922] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\et-EE\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x66127080, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x66127080, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0030.923] FindNextFileA (in: hFindFile=0x555d60, lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x66127080, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x66127080, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName="..", cAlternateFileName="")) returned 1 [0030.923] FindNextFileA (in: hFindFile=0x555d60, lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66127080, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x66127080, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x66127080, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x545568, dwReserved1=0x80, cFileName="@@_OpenTheBrowserTOR_@@.html", cAlternateFileName="@@_OPE~1.HTM")) returned 1 [0030.923] FindNextFileA (in: hFindFile=0x555d60, lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66127080, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x66127080, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x66127080, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x530000, dwReserved1=0x553288, cFileName="@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html", cAlternateFileName="@@____~1.HTM")) returned 1 [0030.923] FindNextFileA (in: hFindFile=0x555d60, lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb4e9cfd, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xeb74b2cd, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xeb74b2cd, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x38bda8, dwReserved1=0x77163c74, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0030.923] FindNextFileA (in: hFindFile=0x555d60, lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb4e9cfd, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xeb74b2cd, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xeb74b2cd, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x38bda8, dwReserved1=0x77163c74, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0030.923] FindClose (in: hFindFile=0x555d60 | out: hFindFile=0x555d60) returned 1 [0030.923] FindNextFileA (in: hFindFile=0x555d20, lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x530000, dwReserved1=0x553288, cFileName="fi-FI", cAlternateFileName="")) returned 1 [0030.923] AreFileApisANSI () returned 1 [0030.923] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x547a90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 87 [0030.924] AreFileApisANSI () returned 1 [0030.924] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x547a90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 92 [0030.926] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\fi-FI\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x66127080, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x66127080, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0030.927] FindNextFileA (in: hFindFile=0x555d60, lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x66127080, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x66127080, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName="..", cAlternateFileName="")) returned 1 [0030.927] FindNextFileA (in: hFindFile=0x555d60, lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66127080, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x66127080, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x66127080, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x545568, dwReserved1=0x80, cFileName="@@_OpenTheBrowserTOR_@@.html", cAlternateFileName="@@_OPE~1.HTM")) returned 1 [0030.927] FindNextFileA (in: hFindFile=0x555d60, lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66127080, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0x66127080, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x66127080, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x530000, dwReserved1=0x553288, cFileName="@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html", cAlternateFileName="@@____~1.HTM")) returned 1 [0030.927] FindNextFileA (in: hFindFile=0x555d60, lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe47dd5b4, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe4a64ce1, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe4a64ce1, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x38bda8, dwReserved1=0x77163c74, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0030.927] FindNextFileA (in: hFindFile=0x555d60, lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe47dd5b4, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe4a64ce1, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe4a64ce1, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x38bda8, dwReserved1=0x77163c74, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0030.927] FindClose (in: hFindFile=0x555d60 | out: hFindFile=0x555d60) returned 1 [0030.927] FindNextFileA (in: hFindFile=0x555d20, lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92f4e4a1, ftCreationTime.dwHighDateTime=0x1c9ea0f, ftLastAccessTime.dwLowDateTime=0x92f4e4a1, ftLastAccessTime.dwHighDateTime=0x1c9ea0f, ftLastWriteTime.dwLowDateTime=0x92f9a75d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x186b84, dwReserved0=0x530000, dwReserved1=0x553288, cFileName="FlickAnimation.avi", cAlternateFileName="")) returned 1 [0030.927] AreFileApisANSI () returned 1 [0030.927] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38cdc4, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 71 [0030.927] FindNextFileA (in: hFindFile=0x555d20, lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c53a9c4, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x5c53a9c4, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xe29c9700, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xe2800, dwReserved0=0x552e90, dwReserved1=0x1, cFileName="FlickLearningWizard.exe", cAlternateFileName="")) returned 1 [0030.927] FindNextFileA (in: hFindFile=0x555d20, lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x98159680, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x98159680, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x530000, dwReserved1=0x553288, cFileName="fr-FR", cAlternateFileName="")) returned 1 [0030.927] AreFileApisANSI () returned 1 [0030.927] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x547a90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 87 [0030.928] AreFileApisANSI () returned 1 [0030.929] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x547a90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 92 [0030.930] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\fr-FR\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x66127080, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x66127080, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0030.930] FindNextFileA (in: hFindFile=0x555d60, lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x66127080, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x66127080, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName="..", cAlternateFileName="")) returned 1 [0030.930] AreFileApisANSI () returned 1 [0030.930] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5422e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 95 [0030.933] AreFileApisANSI () returned 1 [0030.933] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5422e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 100 [0030.935] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6614d1e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x6614d1e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x10, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0030.935] AreFileApisANSI () returned 1 [0030.935] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5422e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 102 [0030.937] AreFileApisANSI () returned 1 [0030.937] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5422e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0030.938] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6614d1e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x6614d1e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x10, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0030.938] AreFileApisANSI () returned 1 [0030.938] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38bafc, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 85 [0030.939] AreFileApisANSI () returned 1 [0030.939] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38c460, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 77 [0030.939] AreFileApisANSI () returned 1 [0030.939] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5422e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 102 [0030.942] AreFileApisANSI () returned 1 [0030.942] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5422e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0030.945] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6614d1e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x6614d1e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x10, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0030.945] AreFileApisANSI () returned 1 [0030.945] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38bafc, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 80 [0030.945] AreFileApisANSI () returned 1 [0030.945] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38bafc, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 88 [0030.946] AreFileApisANSI () returned 1 [0030.946] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38bafc, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 85 [0030.946] AreFileApisANSI () returned 1 [0030.946] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38c460, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 77 [0030.946] AreFileApisANSI () returned 1 [0030.947] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5422e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 100 [0030.949] AreFileApisANSI () returned 1 [0030.949] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5422e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 105 [0030.951] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x66173340, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x66173340, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x10, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0030.951] AreFileApisANSI () returned 1 [0030.951] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38bafc, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 80 [0030.952] AreFileApisANSI () returned 1 [0030.952] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38bafc, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0030.952] AreFileApisANSI () returned 1 [0030.952] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38bafc, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 86 [0030.953] AreFileApisANSI () returned 1 [0030.953] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38bafc, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 83 [0030.953] AreFileApisANSI () returned 1 [0030.953] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38bafc, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0030.954] AreFileApisANSI () returned 1 [0030.955] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38bafc, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0030.955] AreFileApisANSI () returned 1 [0030.955] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38bafc, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0030.956] AreFileApisANSI () returned 1 [0030.956] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38bafc, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0030.956] AreFileApisANSI () returned 1 [0030.956] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38bafc, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0030.956] AreFileApisANSI () returned 1 [0030.957] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38bafc, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0030.957] AreFileApisANSI () returned 1 [0030.957] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38bafc, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 87 [0030.957] AreFileApisANSI () returned 1 [0030.957] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38bafc, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 83 [0030.958] AreFileApisANSI () returned 1 [0030.958] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38bafc, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 87 [0030.958] AreFileApisANSI () returned 1 [0030.958] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38c460, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 75 [0030.959] AreFileApisANSI () returned 1 [0030.959] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5422e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 103 [0030.960] AreFileApisANSI () returned 1 [0030.960] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5422e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 108 [0030.963] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x66173340, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x66173340, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x10, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0030.964] AreFileApisANSI () returned 1 [0030.964] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38bafc, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 86 [0030.964] AreFileApisANSI () returned 1 [0030.964] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38c460, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 78 [0030.965] AreFileApisANSI () returned 1 [0030.965] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5422e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 103 [0030.967] AreFileApisANSI () returned 1 [0030.967] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5422e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 108 [0030.970] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x661994a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x661994a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x10, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0030.971] AreFileApisANSI () returned 1 [0030.971] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38bafc, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 90 [0030.972] AreFileApisANSI () returned 1 [0030.972] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38c460, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 78 [0030.972] AreFileApisANSI () returned 1 [0030.972] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5422e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 105 [0030.976] AreFileApisANSI () returned 1 [0030.976] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5422e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 110 [0030.979] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\osknumpad\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x661994a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x661994a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x10, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0030.980] AreFileApisANSI () returned 1 [0030.980] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38bafc, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 94 [0030.980] AreFileApisANSI () returned 1 [0030.980] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38c460, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 80 [0030.981] AreFileApisANSI () returned 1 [0030.981] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5422e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 103 [0030.982] AreFileApisANSI () returned 1 [0030.982] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5422e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 108 [0030.984] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x661bf600, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x661bf600, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x10, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0030.985] AreFileApisANSI () returned 1 [0030.985] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38bafc, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 90 [0030.986] AreFileApisANSI () returned 1 [0030.986] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38c460, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 78 [0030.986] AreFileApisANSI () returned 1 [0030.986] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5422e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 103 [0030.987] AreFileApisANSI () returned 1 [0030.987] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5422e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 108 [0030.990] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x661bf600, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x661bf600, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x10, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0030.990] AreFileApisANSI () returned 1 [0030.990] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38bafc, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 85 [0030.990] AreFileApisANSI () returned 1 [0030.991] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38bafc, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 88 [0030.991] AreFileApisANSI () returned 1 [0030.991] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38bafc, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 86 [0030.992] AreFileApisANSI () returned 1 [0030.992] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38c460, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 78 [0030.992] AreFileApisANSI () returned 1 [0030.992] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5422e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 99 [0030.994] AreFileApisANSI () returned 1 [0030.994] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5422e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 104 [0030.997] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x661bf600, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x661bf600, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x10, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0030.997] AreFileApisANSI () returned 1 [0030.997] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38bafc, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 82 [0030.998] AreFileApisANSI () returned 1 [0030.998] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38c460, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0030.998] AreFileApisANSI () returned 1 [0030.998] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x547a90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 87 [0031.000] AreFileApisANSI () returned 1 [0031.000] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x547a90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 92 [0031.001] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\he-IL\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x661e5760, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x661e5760, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x6e, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0031.002] AreFileApisANSI () returned 1 [0031.002] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x547a90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 87 [0031.003] AreFileApisANSI () returned 1 [0031.003] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x547a90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 92 [0031.006] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\hr-HR\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x661e5760, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x661e5760, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x6e, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0031.006] AreFileApisANSI () returned 1 [0031.006] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x547a90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 87 [0031.008] AreFileApisANSI () returned 1 [0031.008] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x547a90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 92 [0031.009] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\hu-HU\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x661e5760, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x661e5760, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x6e, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0031.010] AreFileApisANSI () returned 1 [0031.010] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38cdc4, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 68 [0031.010] AreFileApisANSI () returned 1 [0031.010] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5422e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 98 [0031.012] AreFileApisANSI () returned 1 [0031.012] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5422e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 103 [0031.014] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\HWRCustomization\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e0df36a, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x6620b8c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x6620b8c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x10, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0031.015] AreFileApisANSI () returned 1 [0031.015] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38cdc4, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 65 [0031.016] AreFileApisANSI () returned 1 [0031.016] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38cdc4, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 65 [0031.016] AreFileApisANSI () returned 1 [0031.016] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38cdc4, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 67 [0031.016] AreFileApisANSI () returned 1 [0031.016] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38cdc4, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 64 [0031.017] AreFileApisANSI () returned 1 [0031.017] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38cdc4, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 64 [0031.017] AreFileApisANSI () returned 1 [0031.017] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38cdc4, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 65 [0031.017] AreFileApisANSI () returned 1 [0031.017] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38cdc4, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 65 [0031.017] AreFileApisANSI () returned 1 [0031.017] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38cdc4, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0031.018] AreFileApisANSI () returned 1 [0031.018] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38cdc4, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0031.018] AreFileApisANSI () returned 1 [0031.018] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38cdc4, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0031.019] AreFileApisANSI () returned 1 [0031.019] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38cdc4, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0031.019] AreFileApisANSI () returned 1 [0031.019] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38cdc4, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0031.019] AreFileApisANSI () returned 1 [0031.019] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38cdc4, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0031.019] AreFileApisANSI () returned 1 [0031.019] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38cdc4, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 62 [0031.020] AreFileApisANSI () returned 1 [0031.020] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38cdc4, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0031.020] AreFileApisANSI () returned 1 [0031.020] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38cdc4, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0031.020] AreFileApisANSI () returned 1 [0031.020] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38cdc4, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0031.021] AreFileApisANSI () returned 1 [0031.021] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38cdc4, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0031.021] AreFileApisANSI () returned 1 [0031.021] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38cdc4, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0031.021] AreFileApisANSI () returned 1 [0031.021] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38cdc4, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0031.021] AreFileApisANSI () returned 1 [0031.021] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38cdc4, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0031.022] AreFileApisANSI () returned 1 [0031.022] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38cdc4, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0031.022] AreFileApisANSI () returned 1 [0031.022] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38cdc4, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0031.022] AreFileApisANSI () returned 1 [0031.023] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38cdc4, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0031.023] AreFileApisANSI () returned 1 [0031.023] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38cdc4, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0031.023] AreFileApisANSI () returned 1 [0031.024] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38cdc4, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0031.024] AreFileApisANSI () returned 1 [0031.024] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38cdc4, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0031.024] AreFileApisANSI () returned 1 [0031.024] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38cdc4, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0031.028] AreFileApisANSI () returned 1 [0031.028] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38cdc4, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0031.028] AreFileApisANSI () returned 1 [0031.028] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38cdc4, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0031.028] AreFileApisANSI () returned 1 [0031.028] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38cdc4, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0031.028] AreFileApisANSI () returned 1 [0031.028] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x547a90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 87 [0031.030] AreFileApisANSI () returned 1 [0031.030] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x547a90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 92 [0031.032] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\it-IT\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x66231a20, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x66231a20, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x6e, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0031.032] AreFileApisANSI () returned 1 [0031.032] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x547a90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 87 [0031.033] AreFileApisANSI () returned 1 [0031.033] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x547a90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 92 [0031.036] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\ja-JP\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x66231a20, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x66231a20, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x6e, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0031.036] AreFileApisANSI () returned 1 [0031.036] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x547a90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 87 [0031.038] AreFileApisANSI () returned 1 [0031.038] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x547a90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 92 [0031.039] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\ko-KR\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x66231a20, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x66231a20, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x6e, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0031.040] AreFileApisANSI () returned 1 [0031.040] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x547a90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 87 [0031.042] AreFileApisANSI () returned 1 [0031.042] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x547a90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 92 [0031.049] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\lt-LT\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x66257b80, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x66257b80, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x6e, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0031.049] AreFileApisANSI () returned 1 [0031.049] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x547a90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 87 [0031.051] AreFileApisANSI () returned 1 [0031.051] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x547a90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 92 [0031.052] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\lv-LV\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x66257b80, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x66257b80, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x6e, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0031.053] AreFileApisANSI () returned 1 [0031.053] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x547a90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 87 [0031.055] AreFileApisANSI () returned 1 [0031.055] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x547a90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 92 [0031.056] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\nb-NO\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x66257b80, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x66257b80, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x6e, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0031.057] AreFileApisANSI () returned 1 [0031.057] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x547a90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 87 [0031.061] AreFileApisANSI () returned 1 [0031.061] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x547a90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 92 [0031.062] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\nl-NL\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6627dce0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x6627dce0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x6e, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0031.063] AreFileApisANSI () returned 1 [0031.063] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x547a90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 87 [0031.073] AreFileApisANSI () returned 1 [0031.073] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x547a90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 92 [0031.076] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\pl-PL\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x662a3e40, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x662a3e40, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x6e, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0031.076] AreFileApisANSI () returned 1 [0031.076] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x547a90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 87 [0031.078] AreFileApisANSI () returned 1 [0031.078] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x547a90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 92 [0031.079] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-BR\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x662a3e40, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x662a3e40, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x6e, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0031.080] AreFileApisANSI () returned 1 [0031.080] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x547a90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 87 [0031.081] AreFileApisANSI () returned 1 [0031.081] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x547a90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 92 [0031.083] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-PT\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x662a3e40, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x662a3e40, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x6e, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0031.083] AreFileApisANSI () returned 1 [0031.083] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x547a90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 87 [0031.085] AreFileApisANSI () returned 1 [0031.085] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x547a90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 92 [0031.086] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\ro-RO\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x662a3e40, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x662a3e40, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x6e, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0031.087] AreFileApisANSI () returned 1 [0031.087] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x547a90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 87 [0031.093] AreFileApisANSI () returned 1 [0031.093] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x547a90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 92 [0031.094] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\ru-RU\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x662c9fa0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x662c9fa0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x6e, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0031.095] AreFileApisANSI () returned 1 [0031.095] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x547a90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 87 [0031.097] AreFileApisANSI () returned 1 [0031.097] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x547a90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 92 [0031.098] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\sk-SK\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x662c9fa0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x662c9fa0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x6e, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0031.099] AreFileApisANSI () returned 1 [0031.099] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x547a90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 87 [0031.100] AreFileApisANSI () returned 1 [0031.100] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x547a90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 92 [0031.101] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\sl-SI\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x662c9fa0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x662c9fa0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x6e, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0031.102] AreFileApisANSI () returned 1 [0031.102] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x547a90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 92 [0031.104] AreFileApisANSI () returned 1 [0031.104] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x55dc90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 97 [0031.107] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\sr-Latn-CS\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x662f0100, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x662f0100, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x6e, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0031.108] AreFileApisANSI () returned 1 [0031.108] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x547a90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 87 [0031.110] AreFileApisANSI () returned 1 [0031.110] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x547a90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 92 [0031.112] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\sv-SE\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x662f0100, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x662f0100, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x6e, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0031.112] AreFileApisANSI () returned 1 [0031.112] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x547a90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 87 [0031.117] AreFileApisANSI () returned 1 [0031.117] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x547a90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 92 [0031.118] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\th-TH\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x662f0100, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x662f0100, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x6e, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0031.119] AreFileApisANSI () returned 1 [0031.119] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x547a90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 87 [0031.120] AreFileApisANSI () returned 1 [0031.120] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x547a90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 92 [0031.121] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\tr-TR\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x662f0100, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x662f0100, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x6e, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0031.122] AreFileApisANSI () returned 1 [0031.122] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x547a90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 87 [0031.123] AreFileApisANSI () returned 1 [0031.123] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x547a90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 92 [0031.124] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\uk-UA\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x66316260, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x66316260, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x6e, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0031.125] AreFileApisANSI () returned 1 [0031.125] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x547a90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 87 [0031.127] AreFileApisANSI () returned 1 [0031.127] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x547a90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 92 [0031.128] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-CN\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x66316260, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x66316260, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x6e, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0031.128] AreFileApisANSI () returned 1 [0031.128] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x547a90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 87 [0031.129] AreFileApisANSI () returned 1 [0031.130] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x547a90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 92 [0031.131] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-TW\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x66316260, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x66316260, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x6e, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0031.131] AreFileApisANSI () returned 1 [0031.131] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5422e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0031.133] AreFileApisANSI () returned 1 [0031.133] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5422e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 98 [0031.136] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69dc9750, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x66316260, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x66316260, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x6e, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0031.136] AreFileApisANSI () returned 1 [0031.136] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x547a90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0031.138] AreFileApisANSI () returned 1 [0031.138] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x547a90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0031.140] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6633c3c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x6633c3c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x6e, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0031.141] AreFileApisANSI () returned 1 [0031.141] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x547a90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 90 [0031.142] AreFileApisANSI () returned 1 [0031.142] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x547a90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 95 [0031.143] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\en-US\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x6633c3c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x6633c3c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x6e, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0031.143] AreFileApisANSI () returned 1 [0031.143] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x547a90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 86 [0031.145] AreFileApisANSI () returned 1 [0031.145] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x547a90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 91 [0031.146] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x6633c3c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x6633c3c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x6e, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0031.146] AreFileApisANSI () returned 1 [0031.146] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x547a90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 91 [0031.148] AreFileApisANSI () returned 1 [0031.148] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x547a90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 96 [0031.149] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x6633c3c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x6633c3c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x6e, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0031.150] AreFileApisANSI () returned 1 [0031.150] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5422e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 95 [0031.154] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Cultures\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xceefecc0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x66362520, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x66362520, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x10, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0031.162] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x66362520, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x66362520, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x10, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0031.170] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x15419830, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x66388680, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x66388680, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x10, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0031.177] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\access.en-us\\accessmui.xml"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\access.en-us\\accessmui.xml.masked"), dwFlags=0x2) returned 1 [0031.178] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x553318 | out: hHeap=0x530000) returned 1 [0031.178] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x553290 | out: hHeap=0x530000) returned 1 [0031.178] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55dc90 | out: hHeap=0x530000) returned 1 [0031.178] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0031.178] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0031.185] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\access.en-us\\accessmuiset.xml"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\access.en-us\\accessmuiset.xml.masked"), dwFlags=0x2) returned 1 [0031.185] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x553318 | out: hHeap=0x530000) returned 1 [0031.185] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x553290 | out: hHeap=0x530000) returned 1 [0031.185] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55dc90 | out: hHeap=0x530000) returned 1 [0031.185] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0031.185] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0031.195] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\access.en-us\\setup.xml"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\access.en-us\\setup.xml.masked"), dwFlags=0x2) returned 1 [0031.196] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x553290 | out: hHeap=0x530000) returned 1 [0031.196] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55dd08 | out: hHeap=0x530000) returned 1 [0031.196] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55dc90 | out: hHeap=0x530000) returned 1 [0031.196] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0031.196] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0031.200] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa64b3d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x663d4940, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x663d4940, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x10, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0031.204] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\excel.en-us\\excelmui.xml"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\excel.en-us\\excelmui.xml.masked"), dwFlags=0x2) returned 1 [0031.204] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x553318 | out: hHeap=0x530000) returned 1 [0031.204] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x553290 | out: hHeap=0x530000) returned 1 [0031.204] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55dc90 | out: hHeap=0x530000) returned 1 [0031.205] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0031.205] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0031.209] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\excel.en-us\\setup.xml"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\excel.en-us\\setup.xml.masked"), dwFlags=0x2) returned 1 [0031.210] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x553290 | out: hHeap=0x530000) returned 1 [0031.210] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55dd08 | out: hHeap=0x530000) returned 1 [0031.210] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55dc90 | out: hHeap=0x530000) returned 1 [0031.210] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0031.210] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0031.214] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd658ff0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x663d4940, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x663d4940, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x10, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0031.217] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\groove.en-us\\groovemui.xml"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\groove.en-us\\groovemui.xml.masked"), dwFlags=0x2) returned 1 [0031.217] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x553318 | out: hHeap=0x530000) returned 1 [0031.217] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x553290 | out: hHeap=0x530000) returned 1 [0031.217] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55dc90 | out: hHeap=0x530000) returned 1 [0031.217] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0031.218] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0031.224] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\groove.en-us\\setup.xml"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\groove.en-us\\setup.xml.masked"), dwFlags=0x2) returned 1 [0031.224] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x553290 | out: hHeap=0x530000) returned 1 [0031.224] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55dd08 | out: hHeap=0x530000) returned 1 [0031.224] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55dc90 | out: hHeap=0x530000) returned 1 [0031.224] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0031.224] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0031.229] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x112a3b30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x663faaa0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x663faaa0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x10, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0031.232] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\infopath.en-us\\infopathmui.xml"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\infopath.en-us\\infopathmui.xml.masked"), dwFlags=0x2) returned 1 [0031.233] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x553318 | out: hHeap=0x530000) returned 1 [0031.233] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x553290 | out: hHeap=0x530000) returned 1 [0031.233] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55dc90 | out: hHeap=0x530000) returned 1 [0031.233] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0031.233] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0031.241] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\infopath.en-us\\setup.xml"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\infopath.en-us\\setup.xml.masked"), dwFlags=0x2) returned 1 [0031.241] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x553318 | out: hHeap=0x530000) returned 1 [0031.241] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x553290 | out: hHeap=0x530000) returned 1 [0031.241] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55dc90 | out: hHeap=0x530000) returned 1 [0031.241] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0031.241] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0031.249] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x66446d60, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x66446d60, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x10, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0031.809] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\branding.xml"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\branding.xml.masked"), dwFlags=0x2) returned 1 [0031.810] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x553318 | out: hHeap=0x530000) returned 1 [0031.810] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x553290 | out: hHeap=0x530000) returned 1 [0031.810] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55dc90 | out: hHeap=0x530000) returned 1 [0031.810] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0031.810] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0031.818] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\officemui.xml"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\officemui.xml.masked"), dwFlags=0x2) returned 1 [0031.819] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x553318 | out: hHeap=0x530000) returned 1 [0031.819] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x553290 | out: hHeap=0x530000) returned 1 [0031.819] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55dc90 | out: hHeap=0x530000) returned 1 [0031.819] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0031.819] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0031.821] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\officemuiset.xml"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\officemuiset.xml.masked"), dwFlags=0x2) returned 1 [0031.822] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x553318 | out: hHeap=0x530000) returned 1 [0031.822] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x553290 | out: hHeap=0x530000) returned 1 [0031.822] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55dc90 | out: hHeap=0x530000) returned 1 [0031.823] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0031.823] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0031.834] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\setup.xml"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\setup.xml.masked"), dwFlags=0x2) returned 1 [0031.834] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x553290 | out: hHeap=0x530000) returned 1 [0031.834] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55dd08 | out: hHeap=0x530000) returned 1 [0031.834] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55dc90 | out: hHeap=0x530000) returned 1 [0031.834] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0031.834] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0031.839] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19b82c30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x669ee1a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x669ee1a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x10, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0031.843] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.en-us\\office32mui.xml"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.en-us\\office32mui.xml.masked"), dwFlags=0x2) returned 1 [0031.847] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x553318 | out: hHeap=0x530000) returned 1 [0031.847] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x553290 | out: hHeap=0x530000) returned 1 [0031.847] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55dc90 | out: hHeap=0x530000) returned 1 [0031.847] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0031.847] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0031.851] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.en-us\\setup.xml"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.en-us\\setup.xml.masked"), dwFlags=0x2) returned 1 [0031.851] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x553318 | out: hHeap=0x530000) returned 1 [0031.851] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x553290 | out: hHeap=0x530000) returned 1 [0031.851] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55dc90 | out: hHeap=0x530000) returned 1 [0031.851] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0031.851] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0031.856] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x22200730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x66a14300, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x66a14300, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x10, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0031.862] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.ww\\office32ww.xml"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.ww\\office32ww.xml.masked"), dwFlags=0x2) returned 1 [0031.863] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x553318 | out: hHeap=0x530000) returned 1 [0031.863] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x553290 | out: hHeap=0x530000) returned 1 [0031.863] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55dc90 | out: hHeap=0x530000) returned 1 [0031.863] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0031.863] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0031.867] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc840bb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x66a14300, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x66a14300, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x10, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0031.871] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\onenote.en-us\\onenotemui.xml"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\onenote.en-us\\onenotemui.xml.masked"), dwFlags=0x2) returned 1 [0031.873] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x553318 | out: hHeap=0x530000) returned 1 [0031.873] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x553290 | out: hHeap=0x530000) returned 1 [0031.873] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55dc90 | out: hHeap=0x530000) returned 1 [0031.873] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0031.873] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0031.877] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\onenote.en-us\\setup.xml"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\onenote.en-us\\setup.xml.masked"), dwFlags=0x2) returned 1 [0031.878] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x553290 | out: hHeap=0x530000) returned 1 [0031.878] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55dd08 | out: hHeap=0x530000) returned 1 [0031.878] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55dc90 | out: hHeap=0x530000) returned 1 [0031.878] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0031.878] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0031.882] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14af010, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x66a3a460, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x66a3a460, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x10, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0031.888] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\outlook.en-us\\outlookmui.xml"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\outlook.en-us\\outlookmui.xml.masked"), dwFlags=0x2) returned 1 [0031.888] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x553318 | out: hHeap=0x530000) returned 1 [0031.888] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x553290 | out: hHeap=0x530000) returned 1 [0031.888] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55dc90 | out: hHeap=0x530000) returned 1 [0031.888] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0031.888] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0031.895] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\outlook.en-us\\setup.xml"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\outlook.en-us\\setup.xml.masked"), dwFlags=0x2) returned 1 [0031.896] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x553290 | out: hHeap=0x530000) returned 1 [0031.896] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55dd08 | out: hHeap=0x530000) returned 1 [0031.896] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55dc90 | out: hHeap=0x530000) returned 1 [0031.896] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0031.896] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0031.900] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5db14d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x66a605c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x66a605c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0031.904] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\powerpoint.en-us\\powerpointmui.xml"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\powerpoint.en-us\\powerpointmui.xml.masked"), dwFlags=0x2) returned 1 [0031.904] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5533a0 | out: hHeap=0x530000) returned 1 [0031.904] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x553318 | out: hHeap=0x530000) returned 1 [0031.904] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x553290 | out: hHeap=0x530000) returned 1 [0031.905] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0031.905] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0031.913] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\powerpoint.en-us\\setup.xml"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\powerpoint.en-us\\setup.xml.masked"), dwFlags=0x2) returned 1 [0031.913] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x553318 | out: hHeap=0x530000) returned 1 [0031.913] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x553290 | out: hHeap=0x530000) returned 1 [0031.913] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55dc90 | out: hHeap=0x530000) returned 1 [0031.913] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0031.913] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0031.918] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe2e8f80, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0x66aac880, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x66aac880, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x10, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0031.927] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\prjpror\\prjprorww.xml"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\prjpror\\prjprorww.xml.masked"), dwFlags=0x2) returned 1 [0031.927] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x553290 | out: hHeap=0x530000) returned 1 [0031.927] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55dd08 | out: hHeap=0x530000) returned 1 [0031.927] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55dc90 | out: hHeap=0x530000) returned 1 [0031.927] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0031.927] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0031.945] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\prjpror\\setup.xml"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\prjpror\\setup.xml.masked"), dwFlags=0x2) returned 1 [0031.946] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x553290 | out: hHeap=0x530000) returned 1 [0031.946] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55dd08 | out: hHeap=0x530000) returned 1 [0031.946] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55dc90 | out: hHeap=0x530000) returned 1 [0031.946] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0031.946] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0031.957] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf551ba0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0x66af8b40, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x66af8b40, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x10, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0031.960] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\project.en-us\\projectmui.xml"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\project.en-us\\projectmui.xml.masked"), dwFlags=0x2) returned 1 [0031.961] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x553318 | out: hHeap=0x530000) returned 1 [0031.961] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x553290 | out: hHeap=0x530000) returned 1 [0031.961] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55dc90 | out: hHeap=0x530000) returned 1 [0031.961] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0031.961] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0031.965] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\project.en-us\\setup.xml"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\project.en-us\\setup.xml.masked"), dwFlags=0x2) returned 1 [0031.965] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x553290 | out: hHeap=0x530000) returned 1 [0031.965] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55dd08 | out: hHeap=0x530000) returned 1 [0031.965] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55dc90 | out: hHeap=0x530000) returned 1 [0031.966] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0031.966] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0031.971] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99177d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x66b1eca0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x66b1eca0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x10, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0031.975] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.en\\proof.xml"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.en\\proof.xml.masked"), dwFlags=0x2) returned 1 [0031.977] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x553290 | out: hHeap=0x530000) returned 1 [0031.977] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55dd08 | out: hHeap=0x530000) returned 1 [0031.977] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55dc90 | out: hHeap=0x530000) returned 1 [0031.977] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0031.977] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0031.980] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b7fe90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x66b44e00, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x66b44e00, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x10, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0031.984] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.es\\proof.xml"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.es\\proof.xml.masked"), dwFlags=0x2) returned 1 [0031.986] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x553290 | out: hHeap=0x530000) returned 1 [0031.986] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55dd08 | out: hHeap=0x530000) returned 1 [0031.986] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55dc90 | out: hHeap=0x530000) returned 1 [0031.986] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0031.986] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0031.990] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7941190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x66b44e00, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x66b44e00, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x10, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0031.994] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.fr\\proof.xml"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.fr\\proof.xml.masked"), dwFlags=0x2) returned 1 [0031.996] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x553290 | out: hHeap=0x530000) returned 1 [0031.996] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55dd08 | out: hHeap=0x530000) returned 1 [0031.996] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55dc90 | out: hHeap=0x530000) returned 1 [0031.996] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0031.996] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0032.000] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab640f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x66b6af60, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x66b6af60, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x10, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0032.006] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proofing.en-us\\proofing.xml"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proofing.en-us\\proofing.xml.masked"), dwFlags=0x2) returned 1 [0032.006] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x553318 | out: hHeap=0x530000) returned 1 [0032.006] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x553290 | out: hHeap=0x530000) returned 1 [0032.006] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55dc90 | out: hHeap=0x530000) returned 1 [0032.006] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0032.006] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0032.014] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proofing.en-us\\setup.xml"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proofing.en-us\\setup.xml.masked"), dwFlags=0x2) returned 1 [0032.015] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x553318 | out: hHeap=0x530000) returned 1 [0032.015] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x553290 | out: hHeap=0x530000) returned 1 [0032.015] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55dc90 | out: hHeap=0x530000) returned 1 [0032.015] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0032.015] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0032.022] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a95a430, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x66b910c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x66b910c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x10, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0032.044] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proplusr\\proplusrww.xml"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proplusr\\proplusrww.xml.masked"), dwFlags=0x2) returned 1 [0032.045] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x553290 | out: hHeap=0x530000) returned 1 [0032.045] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55dd08 | out: hHeap=0x530000) returned 1 [0032.045] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55dc90 | out: hHeap=0x530000) returned 1 [0032.045] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0032.045] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0032.085] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proplusr\\setup.xml"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proplusr\\setup.xml.masked"), dwFlags=0x2) returned 1 [0032.086] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x553290 | out: hHeap=0x530000) returned 1 [0032.086] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55dd08 | out: hHeap=0x530000) returned 1 [0032.086] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55dc90 | out: hHeap=0x530000) returned 1 [0032.086] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0032.086] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0032.090] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ba9ab90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x66c4f7a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x66c4f7a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0032.094] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\publisher.en-us\\publishermui.xml"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\publisher.en-us\\publishermui.xml.masked"), dwFlags=0x2) returned 1 [0032.097] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5533a0 | out: hHeap=0x530000) returned 1 [0032.097] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x553318 | out: hHeap=0x530000) returned 1 [0032.097] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x553290 | out: hHeap=0x530000) returned 1 [0032.097] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0032.097] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0032.101] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\publisher.en-us\\setup.xml"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\publisher.en-us\\setup.xml.masked"), dwFlags=0x2) returned 1 [0032.102] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x553318 | out: hHeap=0x530000) returned 1 [0032.102] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x553290 | out: hHeap=0x530000) returned 1 [0032.102] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55dc90 | out: hHeap=0x530000) returned 1 [0032.102] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0032.102] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0032.107] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50b66320, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x66c75900, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x66c75900, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x10, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0032.116] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visio.en-us\\setup.xml"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visio.en-us\\setup.xml.masked"), dwFlags=0x2) returned 1 [0032.117] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x553290 | out: hHeap=0x530000) returned 1 [0032.117] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55dd08 | out: hHeap=0x530000) returned 1 [0032.117] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55dc90 | out: hHeap=0x530000) returned 1 [0032.117] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0032.117] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0032.133] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visio.en-us\\visiomui.xml"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visio.en-us\\visiomui.xml.masked"), dwFlags=0x2) returned 1 [0032.134] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x553318 | out: hHeap=0x530000) returned 1 [0032.134] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x553290 | out: hHeap=0x530000) returned 1 [0032.134] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55dc90 | out: hHeap=0x530000) returned 1 [0032.134] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0032.134] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0032.138] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83258520, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x66cc1bc0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x66cc1bc0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x10, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0032.161] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visior\\setup.xml"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visior\\setup.xml.masked"), dwFlags=0x2) returned 1 [0032.162] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x553290 | out: hHeap=0x530000) returned 1 [0032.162] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55dd08 | out: hHeap=0x530000) returned 1 [0032.162] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55dc90 | out: hHeap=0x530000) returned 1 [0032.162] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0032.162] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0032.174] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visior\\visiorww.xml"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visior\\visiorww.xml.masked"), dwFlags=0x2) returned 1 [0032.175] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x553290 | out: hHeap=0x530000) returned 1 [0032.175] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55dd08 | out: hHeap=0x530000) returned 1 [0032.175] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55dc90 | out: hHeap=0x530000) returned 1 [0032.175] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0032.175] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0032.179] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e501370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x66d0de80, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x66d0de80, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x10, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0032.185] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\word.en-us\\setup.xml"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\word.en-us\\setup.xml.masked"), dwFlags=0x2) returned 1 [0032.186] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x553290 | out: hHeap=0x530000) returned 1 [0032.186] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55dd08 | out: hHeap=0x530000) returned 1 [0032.186] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55dc90 | out: hHeap=0x530000) returned 1 [0032.186] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0032.186] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0032.190] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\word.en-us\\wordmui.xml"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\word.en-us\\wordmui.xml.masked"), dwFlags=0x2) returned 1 [0032.191] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x553290 | out: hHeap=0x530000) returned 1 [0032.191] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55dd08 | out: hHeap=0x530000) returned 1 [0032.191] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55dc90 | out: hHeap=0x530000) returned 1 [0032.191] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0032.191] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0032.194] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x66d33fe0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x66d33fe0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x10, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0032.201] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b0da70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x66d5a140, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x66d5a140, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0032.206] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x66d5a140, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x66d5a140, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0032.211] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeee1cd90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x66d5a140, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x66d5a140, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0032.215] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x66d802a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x66d802a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0032.220] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x66d802a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x66d802a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x10, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0032.231] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\dates.xml"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\dates.xml.masked"), dwFlags=0x2) returned 1 [0032.232] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560cf0 | out: hHeap=0x530000) returned 1 [0032.232] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0032.232] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0032.232] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0032.232] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0032.235] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\phone.xml"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\phone.xml.masked"), dwFlags=0x2) returned 1 [0032.236] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560cf0 | out: hHeap=0x530000) returned 1 [0032.236] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0032.236] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0032.236] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0032.236] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0032.278] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.DAT" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\stocks.dat"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.DAT.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\stocks.dat.masked"), dwFlags=0x2) returned 1 [0032.278] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560cf0 | out: hHeap=0x530000) returned 1 [0032.278] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0032.278] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0032.278] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0032.278] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0032.283] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\stocks.xml"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\stocks.xml.masked"), dwFlags=0x2) returned 1 [0032.283] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560cf0 | out: hHeap=0x530000) returned 1 [0032.283] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0032.283] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0032.283] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0032.283] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0032.317] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\time.xml"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\time.xml.masked"), dwFlags=0x2) returned 1 [0032.317] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560cf0 | out: hHeap=0x530000) returned 1 [0032.317] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0032.317] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0032.317] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0032.317] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0033.442] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\metconv.txt"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\metconv.txt.masked"), dwFlags=0x2) returned 1 [0033.443] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5532e8 | out: hHeap=0x530000) returned 1 [0033.443] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x553290 | out: hHeap=0x530000) returned 1 [0033.443] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0033.443] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0033.443] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0033.447] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\Source Engine\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeef4d890, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x67940f40, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x67940f40, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0033.452] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x67940f40, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x67940f40, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0033.464] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x679670a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x679670a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0033.466] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\en-US\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x679670a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x679670a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0033.471] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x679670a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x679670a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0033.479] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x679670a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x679670a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x10, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0033.484] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\aftrnoon\\preview.gif"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\PREVIEW.GIF.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\aftrnoon\\preview.gif.masked"), dwFlags=0x2) returned 1 [0033.485] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560cf0 | out: hHeap=0x530000) returned 1 [0033.485] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0033.485] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0033.485] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0033.485] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0033.530] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\aftrnoon\\thmbnail.png"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\aftrnoon\\thmbnail.png.masked"), dwFlags=0x2) returned 1 [0033.531] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560cf0 | out: hHeap=0x530000) returned 1 [0033.531] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0033.531] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0033.531] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0033.531] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0033.537] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5146e3d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x679ff620, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x679ff620, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0033.553] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\arctic\\preview.gif"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\PREVIEW.GIF.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\arctic\\preview.gif.masked"), dwFlags=0x2) returned 1 [0033.554] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560cf0 | out: hHeap=0x530000) returned 1 [0033.554] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0033.554] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0033.554] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0033.554] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0033.587] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\arctic\\thmbnail.png"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\arctic\\thmbnail.png.masked"), dwFlags=0x2) returned 1 [0033.588] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560cf0 | out: hHeap=0x530000) returned 1 [0033.588] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0033.588] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0033.588] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0033.588] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0033.594] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51767f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x67a97ba0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x67a97ba0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0033.600] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\axis\\preview.gif"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\PREVIEW.GIF.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\axis\\preview.gif.masked"), dwFlags=0x2) returned 1 [0033.601] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560cf0 | out: hHeap=0x530000) returned 1 [0033.601] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0033.601] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0033.601] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0033.601] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0033.642] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\axis\\thmbnail.png"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\axis\\thmbnail.png.masked"), dwFlags=0x2) returned 1 [0033.642] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560cf0 | out: hHeap=0x530000) returned 1 [0033.643] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0033.643] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0033.643] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0033.643] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0033.648] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x67b09fc0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x67b09fc0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0033.652] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blends\\preview.gif"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\PREVIEW.GIF.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blends\\preview.gif.masked"), dwFlags=0x2) returned 1 [0033.653] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560cf0 | out: hHeap=0x530000) returned 1 [0033.653] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0033.653] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0033.653] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0033.653] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0033.674] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blends\\thmbnail.png"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blends\\thmbnail.png.masked"), dwFlags=0x2) returned 1 [0033.675] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560cf0 | out: hHeap=0x530000) returned 1 [0033.675] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0033.675] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0033.675] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0033.675] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0033.680] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x67b56280, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x67b56280, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x10, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0033.684] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\bluecalm\\preview.gif"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\PREVIEW.GIF.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\bluecalm\\preview.gif.masked"), dwFlags=0x2) returned 1 [0033.684] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560cf0 | out: hHeap=0x530000) returned 1 [0033.684] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0033.684] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0033.684] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0033.684] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0033.724] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\bluecalm\\thmbnail.png"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\bluecalm\\thmbnail.png.masked"), dwFlags=0x2) returned 1 [0033.724] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560cf0 | out: hHeap=0x530000) returned 1 [0033.724] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0033.724] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0033.724] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0033.725] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0033.729] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x67bee800, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x67bee800, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x10, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0033.732] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blueprnt\\preview.gif"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\PREVIEW.GIF.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blueprnt\\preview.gif.masked"), dwFlags=0x2) returned 1 [0033.733] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560cf0 | out: hHeap=0x530000) returned 1 [0033.733] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0033.733] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0033.733] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0033.733] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0033.762] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blueprnt\\thmbnail.png"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blueprnt\\thmbnail.png.masked"), dwFlags=0x2) returned 1 [0033.763] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560cf0 | out: hHeap=0x530000) returned 1 [0033.763] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0033.763] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0033.763] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0033.763] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0033.767] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x67c3aac0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x67c3aac0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x10, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0033.773] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\boldstri\\preview.gif"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\PREVIEW.GIF.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\boldstri\\preview.gif.masked"), dwFlags=0x2) returned 1 [0033.774] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560cf0 | out: hHeap=0x530000) returned 1 [0033.774] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0033.774] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0033.774] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0033.774] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0033.809] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\boldstri\\thmbnail.png"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\boldstri\\thmbnail.png.masked"), dwFlags=0x2) returned 1 [0033.809] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560cf0 | out: hHeap=0x530000) returned 1 [0033.809] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0033.809] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0033.809] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0033.809] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0033.814] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a61ad0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x67cacee0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x67cacee0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0033.818] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\breeze\\preview.gif"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\PREVIEW.GIF.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\breeze\\preview.gif.masked"), dwFlags=0x2) returned 1 [0033.819] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560cf0 | out: hHeap=0x530000) returned 1 [0033.819] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0033.819] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0033.819] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0033.819] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0033.864] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\breeze\\thmbnail.png"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\breeze\\thmbnail.png.masked"), dwFlags=0x2) returned 1 [0033.864] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560cf0 | out: hHeap=0x530000) returned 1 [0033.865] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0033.865] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0033.865] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0033.865] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0033.869] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c2ab50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x67d45460, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x67d45460, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0033.872] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\canyon\\preview.gif"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\PREVIEW.GIF.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\canyon\\preview.gif.masked"), dwFlags=0x2) returned 1 [0033.872] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560cf0 | out: hHeap=0x530000) returned 1 [0033.872] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0033.872] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0033.872] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0033.872] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0033.910] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\canyon\\thmbnail.png"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\canyon\\thmbnail.png.masked"), dwFlags=0x2) returned 1 [0033.911] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560cf0 | out: hHeap=0x530000) returned 1 [0033.911] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0033.911] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0033.911] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0033.911] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0033.915] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c2ab50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x67db7880, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x67db7880, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x10, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0033.920] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\capsules\\preview.gif"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\PREVIEW.GIF.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\capsules\\preview.gif.masked"), dwFlags=0x2) returned 1 [0033.921] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560cf0 | out: hHeap=0x530000) returned 1 [0033.921] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0033.921] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0033.921] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0033.921] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0033.961] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\capsules\\thmbnail.png"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\capsules\\thmbnail.png.masked"), dwFlags=0x2) returned 1 [0033.962] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560cf0 | out: hHeap=0x530000) returned 1 [0033.962] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0033.962] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0033.962] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0033.962] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0033.967] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c50cb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x67e29ca0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x67e29ca0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x10, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0033.971] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\cascade\\preview.gif"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\PREVIEW.GIF.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\cascade\\preview.gif.masked"), dwFlags=0x2) returned 1 [0033.972] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560cf0 | out: hHeap=0x530000) returned 1 [0033.972] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0033.972] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0033.972] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0033.972] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0033.999] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\cascade\\thmbnail.png"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\cascade\\thmbnail.png.masked"), dwFlags=0x2) returned 1 [0034.000] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560cf0 | out: hHeap=0x530000) returned 1 [0034.000] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0034.000] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0034.000] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0034.000] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0034.005] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51cc30d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x67e75f60, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x67e75f60, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x10, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0034.009] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\compass\\preview.gif"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\PREVIEW.GIF.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\compass\\preview.gif.masked"), dwFlags=0x2) returned 1 [0034.010] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560cf0 | out: hHeap=0x530000) returned 1 [0034.010] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0034.010] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0034.010] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0034.010] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0034.040] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\compass\\thmbnail.png"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\compass\\thmbnail.png.masked"), dwFlags=0x2) returned 1 [0034.041] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560cf0 | out: hHeap=0x530000) returned 1 [0034.041] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0034.041] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0034.041] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0034.041] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0034.046] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51cc30d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x67ee8380, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x67ee8380, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x10, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0034.050] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\concrete\\preview.gif"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\PREVIEW.GIF.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\concrete\\preview.gif.masked"), dwFlags=0x2) returned 1 [0034.051] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560cf0 | out: hHeap=0x530000) returned 1 [0034.051] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0034.051] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0034.051] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0034.051] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0034.098] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\concrete\\thmbnail.png"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\concrete\\thmbnail.png.masked"), dwFlags=0x2) returned 1 [0034.099] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560cf0 | out: hHeap=0x530000) returned 1 [0034.099] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0034.099] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0034.099] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0034.099] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0034.104] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x67f80900, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x67f80900, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x10, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0034.111] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\deepblue\\preview.gif"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\PREVIEW.GIF.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\deepblue\\preview.gif.masked"), dwFlags=0x2) returned 1 [0034.112] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560cf0 | out: hHeap=0x530000) returned 1 [0034.112] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0034.112] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0034.112] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0034.112] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0034.156] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\deepblue\\thmbnail.png"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\deepblue\\thmbnail.png.masked"), dwFlags=0x2) returned 1 [0034.156] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560cf0 | out: hHeap=0x530000) returned 1 [0034.156] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0034.157] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0034.157] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0034.157] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0034.162] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x67ff2d20, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x67ff2d20, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0034.166] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\echo\\preview.gif"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\PREVIEW.GIF.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\echo\\preview.gif.masked"), dwFlags=0x2) returned 1 [0034.166] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560cf0 | out: hHeap=0x530000) returned 1 [0034.166] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0034.166] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0034.167] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0034.167] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0034.201] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\echo\\thmbnail.png"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\echo\\thmbnail.png.masked"), dwFlags=0x2) returned 1 [0034.202] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560cf0 | out: hHeap=0x530000) returned 1 [0034.202] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0034.202] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0034.202] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0034.202] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0034.207] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e3fe90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x68065140, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x68065140, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x10, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0034.211] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\eclipse\\preview.gif"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\PREVIEW.GIF.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\eclipse\\preview.gif.masked"), dwFlags=0x2) returned 1 [0034.212] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560cf0 | out: hHeap=0x530000) returned 1 [0034.212] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0034.212] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0034.212] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0034.212] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0034.245] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\eclipse\\thmbnail.png"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\eclipse\\thmbnail.png.masked"), dwFlags=0x2) returned 1 [0034.246] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560cf0 | out: hHeap=0x530000) returned 1 [0034.246] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0034.246] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0034.246] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0034.246] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0034.250] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51f70990, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x680d7560, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x680d7560, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0034.253] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\edge\\preview.gif"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\PREVIEW.GIF.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\edge\\preview.gif.masked"), dwFlags=0x2) returned 1 [0034.254] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560cf0 | out: hHeap=0x530000) returned 1 [0034.254] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0034.254] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0034.254] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0034.254] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0034.282] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\edge\\thmbnail.png"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\edge\\thmbnail.png.masked"), dwFlags=0x2) returned 1 [0034.282] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560cf0 | out: hHeap=0x530000) returned 1 [0034.282] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0034.282] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0034.282] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0034.282] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0034.293] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51fe2db0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x68149980, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x68149980, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x10, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0034.296] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\evrgreen\\preview.gif"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\PREVIEW.GIF.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\evrgreen\\preview.gif.masked"), dwFlags=0x2) returned 1 [0034.297] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560cf0 | out: hHeap=0x530000) returned 1 [0034.297] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0034.297] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0034.297] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0034.297] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0034.329] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\evrgreen\\thmbnail.png"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\evrgreen\\thmbnail.png.masked"), dwFlags=0x2) returned 1 [0034.330] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560cf0 | out: hHeap=0x530000) returned 1 [0034.330] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0034.330] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0034.330] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0034.330] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0034.334] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x68195c40, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x68195c40, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x10, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0034.341] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\expeditn\\preview.gif"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\PREVIEW.GIF.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\expeditn\\preview.gif.masked"), dwFlags=0x2) returned 1 [0034.342] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560cf0 | out: hHeap=0x530000) returned 1 [0034.342] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0034.342] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0034.342] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0034.342] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0034.404] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\expeditn\\thmbnail.png"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\expeditn\\thmbnail.png.masked"), dwFlags=0x2) returned 1 [0034.404] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560cf0 | out: hHeap=0x530000) returned 1 [0034.404] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0034.404] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0034.404] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0034.404] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0034.409] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x68254320, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x68254320, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0034.413] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ice\\preview.gif"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\PREVIEW.GIF.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ice\\preview.gif.masked"), dwFlags=0x2) returned 1 [0034.413] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560ce0 | out: hHeap=0x530000) returned 1 [0034.413] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0034.413] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0034.413] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0034.414] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0034.434] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ice\\thmbnail.png"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ice\\thmbnail.png.masked"), dwFlags=0x2) returned 1 [0034.435] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560cf0 | out: hHeap=0x530000) returned 1 [0034.435] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0034.435] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0034.435] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0034.435] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0034.439] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x539538d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x682a05e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x682a05e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0034.447] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\indust\\preview.gif"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\PREVIEW.GIF.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\indust\\preview.gif.masked"), dwFlags=0x2) returned 1 [0034.448] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560cf0 | out: hHeap=0x530000) returned 1 [0034.448] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0034.448] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0034.448] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0034.448] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0034.484] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\indust\\thmbnail.png"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\indust\\thmbnail.png.masked"), dwFlags=0x2) returned 1 [0034.485] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560cf0 | out: hHeap=0x530000) returned 1 [0034.485] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0034.485] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0034.485] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0034.485] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0034.489] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x68312a00, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x68312a00, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0034.603] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\iris\\preview.gif"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\PREVIEW.GIF.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\iris\\preview.gif.masked"), dwFlags=0x2) returned 1 [0034.604] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560cf0 | out: hHeap=0x530000) returned 1 [0034.604] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0034.604] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0034.604] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0034.604] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0034.630] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\iris\\thmbnail.png"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\iris\\thmbnail.png.masked"), dwFlags=0x2) returned 1 [0034.634] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560cf0 | out: hHeap=0x530000) returned 1 [0034.634] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0034.634] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0034.634] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0034.634] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0034.686] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x567be5d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x68501be0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x68501be0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x10, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0034.690] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\journal\\preview.gif"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\PREVIEW.GIF.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\journal\\preview.gif.masked"), dwFlags=0x2) returned 1 [0034.690] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560cf0 | out: hHeap=0x530000) returned 1 [0034.690] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0034.691] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0034.691] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0034.691] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0034.710] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\journal\\thmbnail.png"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\journal\\thmbnail.png.masked"), dwFlags=0x2) returned 1 [0034.711] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560cf0 | out: hHeap=0x530000) returned 1 [0034.711] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0034.711] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0034.711] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0034.711] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0034.715] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x567e4730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6854dea0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x6854dea0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0034.718] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\layers\\preview.gif"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\PREVIEW.GIF.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\layers\\preview.gif.masked"), dwFlags=0x2) returned 1 [0034.719] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560cf0 | out: hHeap=0x530000) returned 1 [0034.719] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0034.719] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0034.719] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0034.719] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0034.764] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\layers\\thmbnail.png"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\layers\\thmbnail.png.masked"), dwFlags=0x2) returned 1 [0034.764] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560cf0 | out: hHeap=0x530000) returned 1 [0034.764] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0034.764] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0034.764] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0034.764] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0034.768] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x685c02c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x685c02c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0034.772] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\level\\preview.gif"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\PREVIEW.GIF.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\level\\preview.gif.masked"), dwFlags=0x2) returned 1 [0034.772] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560cf0 | out: hHeap=0x530000) returned 1 [0034.772] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0034.772] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0034.773] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0034.773] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0034.820] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\level\\thmbnail.png"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\level\\thmbnail.png.masked"), dwFlags=0x2) returned 1 [0034.821] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560cf0 | out: hHeap=0x530000) returned 1 [0034.821] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0034.821] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0034.821] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0034.821] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0034.824] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59544a90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x68658840, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x68658840, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x10, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0034.828] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\network\\preview.gif"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\PREVIEW.GIF.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\network\\preview.gif.masked"), dwFlags=0x2) returned 1 [0034.828] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560cf0 | out: hHeap=0x530000) returned 1 [0034.828] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0034.828] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0034.828] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0034.828] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0034.841] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\network\\thmbnail.png"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\network\\thmbnail.png.masked"), dwFlags=0x2) returned 1 [0034.841] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560cf0 | out: hHeap=0x530000) returned 1 [0034.841] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0034.842] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0034.842] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0034.842] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0034.846] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59c68c90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6867e9a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x6867e9a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x10, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0034.850] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\papyrus\\preview.gif"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PREVIEW.GIF.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\papyrus\\preview.gif.masked"), dwFlags=0x2) returned 1 [0034.851] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560cf0 | out: hHeap=0x530000) returned 1 [0034.851] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0034.851] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0034.851] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0034.851] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0034.888] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\papyrus\\thmbnail.png"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\papyrus\\thmbnail.png.masked"), dwFlags=0x2) returned 1 [0034.889] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560cf0 | out: hHeap=0x530000) returned 1 [0034.889] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0034.889] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0034.889] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0034.889] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0034.892] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a44b570, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x686f0dc0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x686f0dc0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0034.896] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\pixel\\preview.gif"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PREVIEW.GIF.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\pixel\\preview.gif.masked"), dwFlags=0x2) returned 1 [0034.897] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560cf0 | out: hHeap=0x530000) returned 1 [0034.897] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0034.897] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0034.897] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0034.897] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0034.920] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\pixel\\thmbnail.png"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\pixel\\thmbnail.png.masked"), dwFlags=0x2) returned 1 [0034.921] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560cf0 | out: hHeap=0x530000) returned 1 [0034.921] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0034.921] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0034.921] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0034.921] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0034.925] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6873d080, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x6873d080, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x10, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0034.928] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\profile\\preview.gif"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PREVIEW.GIF.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\profile\\preview.gif.masked"), dwFlags=0x2) returned 1 [0034.929] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560cf0 | out: hHeap=0x530000) returned 1 [0034.929] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0034.929] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0034.929] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0034.929] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0034.946] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\profile\\thmbnail.png"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\profile\\thmbnail.png.masked"), dwFlags=0x2) returned 1 [0034.947] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560cf0 | out: hHeap=0x530000) returned 1 [0034.947] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0034.947] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0034.947] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0034.947] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0034.950] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x68789340, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x68789340, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0034.953] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\quad\\preview.gif"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\PREVIEW.GIF.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\quad\\preview.gif.masked"), dwFlags=0x2) returned 1 [0034.954] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560cf0 | out: hHeap=0x530000) returned 1 [0034.954] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0034.954] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0034.954] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0034.954] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0034.992] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\quad\\thmbnail.png"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\quad\\thmbnail.png.masked"), dwFlags=0x2) returned 1 [0034.993] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560cf0 | out: hHeap=0x530000) returned 1 [0034.993] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0034.993] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0034.993] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0034.993] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0034.997] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a829930, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x687fb760, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x687fb760, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0035.003] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\radial\\preview.gif"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\PREVIEW.GIF.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\radial\\preview.gif.masked"), dwFlags=0x2) returned 1 [0035.004] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560cf0 | out: hHeap=0x530000) returned 1 [0035.004] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0035.004] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0035.004] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0035.004] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0035.026] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\radial\\thmbnail.png"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\radial\\thmbnail.png.masked"), dwFlags=0x2) returned 1 [0035.027] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560cf0 | out: hHeap=0x530000) returned 1 [0035.027] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0035.027] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0035.027] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0035.027] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0035.052] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a84fa90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6886db80, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x6886db80, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x10, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0035.056] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\refined\\preview.gif"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\PREVIEW.GIF.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\refined\\preview.gif.masked"), dwFlags=0x2) returned 1 [0035.056] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560cf0 | out: hHeap=0x530000) returned 1 [0035.056] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0035.056] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0035.056] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0035.056] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0035.076] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\refined\\thmbnail.png"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\refined\\thmbnail.png.masked"), dwFlags=0x2) returned 1 [0035.077] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560cf0 | out: hHeap=0x530000) returned 1 [0035.077] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0035.077] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0035.077] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0035.077] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0035.090] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a89bd50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x688b9e40, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x688b9e40, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x10, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0035.096] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ricepapr\\preview.gif"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\PREVIEW.GIF.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ricepapr\\preview.gif.masked"), dwFlags=0x2) returned 1 [0035.097] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560cf0 | out: hHeap=0x530000) returned 1 [0035.097] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0035.097] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0035.097] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0035.097] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0035.152] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ricepapr\\thmbnail.png"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ricepapr\\thmbnail.png.masked"), dwFlags=0x2) returned 1 [0035.152] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560cf0 | out: hHeap=0x530000) returned 1 [0035.152] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0035.153] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0035.153] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0035.153] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0035.160] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x68978520, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x68978520, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0035.165] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ripple\\preview.gif"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\PREVIEW.GIF.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ripple\\preview.gif.masked"), dwFlags=0x2) returned 1 [0035.166] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560cf0 | out: hHeap=0x530000) returned 1 [0035.166] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0035.166] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0035.166] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0035.166] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0035.202] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ripple\\thmbnail.png"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ripple\\thmbnail.png.masked"), dwFlags=0x2) returned 1 [0035.203] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560cf0 | out: hHeap=0x530000) returned 1 [0035.203] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0035.203] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0035.203] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0035.203] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0035.207] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x689ea940, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x689ea940, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x10, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0035.215] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\rmnsque\\preview.gif"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\PREVIEW.GIF.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\rmnsque\\preview.gif.masked"), dwFlags=0x2) returned 1 [0035.215] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560cf0 | out: hHeap=0x530000) returned 1 [0035.215] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0035.215] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0035.215] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0035.216] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0035.267] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\rmnsque\\thmbnail.png"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\rmnsque\\thmbnail.png.masked"), dwFlags=0x2) returned 1 [0035.268] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560cf0 | out: hHeap=0x530000) returned 1 [0035.268] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0035.268] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0035.268] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0035.268] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0035.273] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x68aa9020, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x68aa9020, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0035.279] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\satin\\preview.gif"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\PREVIEW.GIF.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\satin\\preview.gif.masked"), dwFlags=0x2) returned 1 [0035.280] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560cf0 | out: hHeap=0x530000) returned 1 [0035.280] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0035.280] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0035.280] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0035.280] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0035.325] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\satin\\thmbnail.png"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\satin\\thmbnail.png.masked"), dwFlags=0x2) returned 1 [0035.325] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560cf0 | out: hHeap=0x530000) returned 1 [0035.326] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0035.326] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0035.326] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0035.326] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0035.330] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a980590, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x68b1b440, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x68b1b440, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0035.333] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sky\\preview.gif"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\PREVIEW.GIF.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sky\\preview.gif.masked"), dwFlags=0x2) returned 1 [0035.334] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560ce0 | out: hHeap=0x530000) returned 1 [0035.334] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0035.334] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0035.334] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0035.334] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0035.366] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sky\\thmbnail.png"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sky\\thmbnail.png.masked"), dwFlags=0x2) returned 1 [0035.367] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560cf0 | out: hHeap=0x530000) returned 1 [0035.367] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0035.367] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0035.367] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0035.367] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0035.372] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a980590, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x68b8d860, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x68b8d860, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0035.376] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\slate\\preview.gif"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\PREVIEW.GIF.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\slate\\preview.gif.masked"), dwFlags=0x2) returned 1 [0035.376] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560cf0 | out: hHeap=0x530000) returned 1 [0035.377] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0035.377] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0035.377] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0035.377] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0035.405] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\slate\\thmbnail.png"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\slate\\thmbnail.png.masked"), dwFlags=0x2) returned 1 [0035.405] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560cf0 | out: hHeap=0x530000) returned 1 [0035.405] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0035.405] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0035.405] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0035.405] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0035.410] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5aad71f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x68bd9b20, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x68bd9b20, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0035.414] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sonora\\preview.gif"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\PREVIEW.GIF.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sonora\\preview.gif.masked"), dwFlags=0x2) returned 1 [0035.415] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560cf0 | out: hHeap=0x530000) returned 1 [0035.415] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0035.415] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0035.415] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0035.415] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0035.438] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sonora\\thmbnail.png"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sonora\\thmbnail.png.masked"), dwFlags=0x2) returned 1 [0035.439] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560cf0 | out: hHeap=0x530000) returned 1 [0035.439] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0035.439] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0035.439] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0035.439] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0035.443] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x68c4bf40, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x68c4bf40, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0035.449] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\spring\\preview.gif"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\PREVIEW.GIF.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\spring\\preview.gif.masked"), dwFlags=0x2) returned 1 [0035.450] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560cf0 | out: hHeap=0x530000) returned 1 [0035.450] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0035.450] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0035.450] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0035.450] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0035.481] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\spring\\thmbnail.png"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\spring\\thmbnail.png.masked"), dwFlags=0x2) returned 1 [0035.481] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560cf0 | out: hHeap=0x530000) returned 1 [0035.481] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0035.481] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0035.482] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0035.482] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0035.487] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5abe1b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x68c98200, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x68c98200, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x10, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0035.492] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\strtedge\\preview.gif"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\PREVIEW.GIF.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\strtedge\\preview.gif.masked"), dwFlags=0x2) returned 1 [0035.493] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560cf0 | out: hHeap=0x530000) returned 1 [0035.493] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0035.493] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0035.493] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0035.493] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0035.545] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\strtedge\\thmbnail.png"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\strtedge\\thmbnail.png.masked"), dwFlags=0x2) returned 1 [0035.546] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560cf0 | out: hHeap=0x530000) returned 1 [0035.546] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0035.546] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0035.546] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0035.546] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0035.551] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x68d30780, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x68d30780, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0035.557] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\studio\\preview.gif"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\PREVIEW.GIF.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\studio\\preview.gif.masked"), dwFlags=0x2) returned 1 [0035.557] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560cf0 | out: hHeap=0x530000) returned 1 [0035.557] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0035.558] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0035.558] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0035.558] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0035.582] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\studio\\thmbnail.png"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\studio\\thmbnail.png.masked"), dwFlags=0x2) returned 1 [0035.583] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560cf0 | out: hHeap=0x530000) returned 1 [0035.583] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0035.583] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0035.583] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0035.583] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0035.588] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x68da2ba0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x68da2ba0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x10, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0035.595] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sumipntg\\preview.gif"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\PREVIEW.GIF.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sumipntg\\preview.gif.masked"), dwFlags=0x2) returned 1 [0035.596] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560cf0 | out: hHeap=0x530000) returned 1 [0035.596] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0035.596] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0035.596] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0035.596] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0035.648] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sumipntg\\thmbnail.png"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\THMBNAIL.PNG.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sumipntg\\thmbnail.png.masked"), dwFlags=0x2) returned 1 [0035.648] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560cf0 | out: hHeap=0x530000) returned 1 [0035.648] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0035.648] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0035.648] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0035.648] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0035.652] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5ad387f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x68e3b120, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x68e3b120, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0035.657] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\water\\preview.gif"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\PREVIEW.GIF.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\water\\preview.gif.masked"), dwFlags=0x2) returned 1 [0035.657] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560cf0 | out: hHeap=0x530000) returned 1 [0035.657] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0035.657] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0035.657] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0035.657] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0035.699] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\water\\thmbnail.png"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\water\\thmbnail.png.masked"), dwFlags=0x2) returned 1 [0035.700] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560cf0 | out: hHeap=0x530000) returned 1 [0035.700] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0035.700] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0035.700] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0035.700] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0035.703] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x68ead540, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x68ead540, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x10, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0035.711] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\watermar\\preview.gif"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\PREVIEW.GIF.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\watermar\\preview.gif.masked"), dwFlags=0x2) returned 1 [0035.712] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560cf0 | out: hHeap=0x530000) returned 1 [0035.712] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0035.712] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0035.712] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0035.712] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0035.753] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\watermar\\thmbnail.png"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\watermar\\thmbnail.png.masked"), dwFlags=0x2) returned 1 [0035.754] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560cf0 | out: hHeap=0x530000) returned 1 [0035.754] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0035.754] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0035.754] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0035.754] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0035.757] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54a7f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x68f45ac0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x68f45ac0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0035.760] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ARFR\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x68f45ac0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x68f45ac0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0035.763] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54ce0b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x68f45ac0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x68f45ac0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0035.766] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x68f45ac0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x68f45ac0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0035.770] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54a7f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x68f45ac0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x68f45ac0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0035.773] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FRAR\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x68f6bc20, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x68f6bc20, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0035.777] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7516b10, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x68f6bc20, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x68f6bc20, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0035.780] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\Triedit\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x68f6bc20, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x68f6bc20, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0035.783] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\Triedit\\en-US\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x68f6bc20, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x68f6bc20, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0035.786] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\VBA\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x68f91d80, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x68f91d80, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0035.790] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x68f91d80, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x68f91d80, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0035.794] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x68f91d80, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x68f91d80, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x6c, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0035.798] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\VC\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd2c6940, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x68f91d80, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x68f91d80, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0035.801] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\VGX\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x68f91d80, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x68f91d80, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0035.805] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81afcd40, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x68fb7ee0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x68fb7ee0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0035.809] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81afcd40, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x68fb7ee0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x68fb7ee0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x10, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0036.169] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\BIGFONT.SHX" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\bigfont.shx"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\BIGFONT.SHX.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\bigfont.shx.masked"), dwFlags=0x2) returned 1 [0036.169] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560cf0 | out: hHeap=0x530000) returned 1 [0036.169] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0036.169] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0036.169] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0036.169] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0036.889] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\CHINESET.SHX" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\chineset.shx"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\CHINESET.SHX.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\chineset.shx.masked"), dwFlags=0x2) returned 1 [0036.890] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560cf0 | out: hHeap=0x530000) returned 1 [0036.890] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0036.890] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0036.890] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0036.890] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0037.417] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\EXTFONT.SHX" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\extfont.shx"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\EXTFONT.SHX.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\extfont.shx.masked"), dwFlags=0x2) returned 1 [0037.418] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560cf0 | out: hHeap=0x530000) returned 1 [0037.418] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0037.418] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0037.418] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0037.418] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0038.272] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\GBCBIG.SHX" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\gbcbig.shx"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\GBCBIG.SHX.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\gbcbig.shx.masked"), dwFlags=0x2) returned 1 [0038.273] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560cf0 | out: hHeap=0x530000) returned 1 [0038.273] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0038.273] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0038.273] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0038.273] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0038.286] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\IC-TXT.SHX" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\ic-txt.shx"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\IC-TXT.SHX.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\ic-txt.shx.masked"), dwFlags=0x2) returned 1 [0038.287] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560cf0 | out: hHeap=0x530000) returned 1 [0038.287] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0038.287] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0038.287] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0038.287] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0038.661] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\WHGDTXT.SHX" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\whgdtxt.shx"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\WHGDTXT.SHX.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\whgdtxt.shx.masked"), dwFlags=0x2) returned 1 [0038.664] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560cf0 | out: hHeap=0x530000) returned 1 [0038.664] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0038.664] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0038.664] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0038.664] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0038.885] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\WHGTXT.SHX" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\whgtxt.shx"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\WHGTXT.SHX.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\whgtxt.shx.masked"), dwFlags=0x2) returned 1 [0038.887] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560cf0 | out: hHeap=0x530000) returned 1 [0038.887] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0038.887] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0038.887] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0038.887] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0039.527] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\WHTGTXT.SHX" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\whtgtxt.shx"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\WHTGTXT.SHX.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\whtgtxt.shx.masked"), dwFlags=0x2) returned 1 [0039.528] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560cf0 | out: hHeap=0x530000) returned 1 [0039.528] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0039.528] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0039.528] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0039.528] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0040.041] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\WHTMTXT.SHX" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\whtmtxt.shx"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\WHTMTXT.SHX.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\whtmtxt.shx.masked"), dwFlags=0x2) returned 1 [0040.041] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560cf0 | out: hHeap=0x530000) returned 1 [0040.041] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0040.041] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0040.042] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0040.042] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0040.046] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a42070, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x6b82f4e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x6b82f4e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0040.051] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a42070, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x6b82f4e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x6b82f4e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0040.063] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\1033\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x617be070, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6b855640, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x6b855640, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x6c, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0040.067] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\VSTOInstaller.config" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoinstaller.config"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\VSTOInstaller.config.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoinstaller.config.masked"), dwFlags=0x2) returned 1 [0040.067] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560cf0 | out: hHeap=0x530000) returned 1 [0040.067] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0040.067] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0040.067] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0040.067] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0040.072] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\Web Folders\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeeb5310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x6b855640, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x6b855640, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0040.074] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\Web Folders\\1033\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeeb5310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x6b855640, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x6b855640, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x10, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0040.079] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x6b87b7a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x6b87b7a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x10, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0040.081] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x6b87b7a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x6b87b7a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x10, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0040.086] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x6b87b7a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x6b87b7a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x10, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0040.088] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\1033\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x6b87b7a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x6b87b7a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x10, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0040.262] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\1033\\FPEXT.MSG" (normalized: "c:\\program files\\common files\\microsoft shared\\web server extensions\\14\\bin\\1033\\fpext.msg"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\1033\\FPEXT.MSG.masked" (normalized: "c:\\program files\\common files\\microsoft shared\\web server extensions\\14\\bin\\1033\\fpext.msg.masked"), dwFlags=0x2) returned 1 [0040.264] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0040.264] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55dc90 | out: hHeap=0x530000) returned 1 [0040.264] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0040.264] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0040.264] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0040.271] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Services\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6ba44820, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x6ba44820, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555ce0 [0040.275] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\SpeechEngines\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6ba44820, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x6ba44820, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555ce0 [0040.282] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6ba6a980, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x6ba6a980, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0040.283] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x180, dwReserved1=0x6c, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0040.283] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x180, dwReserved1=0x10, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0040.284] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd64fa49b, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x180, dwReserved1=0x10, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0040.288] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\System\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6ba6a980, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x6ba6a980, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555ce0 [0040.299] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\System\\ado\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6ba6a980, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x6ba6a980, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0040.301] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\System\\ado\\en-US\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x6ba90ae0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x6ba90ae0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0040.303] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\System\\en-US\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x6ba90ae0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x6ba90ae0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0040.308] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\System\\msadc\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6ba90ae0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x6ba90ae0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0040.311] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\System\\msadc\\en-US\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x6bab6c40, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x6bab6c40, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x6c, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0040.314] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\System\\MSMAPI\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf53e90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6bab6c40, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x6bab6c40, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0040.317] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\System\\MSMAPI\\1033\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf53e90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6bab6c40, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x6bab6c40, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x6c, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0040.320] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\System\\Ole DB\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6bab6c40, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x6bab6c40, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0040.324] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\System\\Ole DB\\en-US\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x6bab6c40, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x6bab6c40, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x6c, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0040.326] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\DVD Maker\\*", lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x6badcda0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x6badcda0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555ca0 [0040.332] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\DVD Maker\\en-US\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ead9a68, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x6badcda0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x6badcda0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555ce0 [0040.336] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\DVD Maker\\Shared\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x6badcda0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x6badcda0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555ce0 [0040.341] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\DVD Maker\\Shared\\DvdStyles\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f0852f1, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x6bb02f00, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x6bb02f00, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0040.347] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f9e8c42, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x6bb02f00, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x6bb02f00, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x6c, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0040.354] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa12338ef, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x6bb02f00, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x6bb02f00, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x6c, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0040.365] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f43efc8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x6bb29060, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x6bb29060, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x6c, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0040.374] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1a3fc59, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x6bb4f1c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x6bb4f1c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x6c, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0040.386] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa0fd11ff, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x6bb4f1c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x6bb4f1c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x6c, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0040.390] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa19a729d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x6bb75320, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x6bb75320, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x6c, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0040.400] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9fbd8be5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x6bb75320, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x6bb75320, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x6c, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0040.408] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f465237, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x6bb9b480, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x6bb9b480, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x6c, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0040.413] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f4fdbf3, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x6bb9b480, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x6bb9b480, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x6c, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0040.423] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa15a10e8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x6bbc15e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x6bbc15e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x6c, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0040.432] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa11287e6, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x6bbc15e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x6bbc15e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x6c, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0040.437] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f38039d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x6bbe7740, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x6bbe7740, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x6c, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0040.443] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa119af33, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x6bbe7740, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x6bbe7740, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x6c, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0040.449] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f4d7984, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x6bbe7740, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x6bbe7740, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x6c, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0040.453] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1a65ec8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x6bc0d8a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x6bc0d8a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x6c, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0040.459] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9fdc8b88, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x6bc0d8a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x6bc0d8a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x6c, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0040.466] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa198102e, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x6bc33a00, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x6bc33a00, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x6c, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0040.471] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa108fe2a, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x6bc33a00, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x6bc33a00, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x6c, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0040.479] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\DVD Maker\\Shared\\DvdStyles\\VideoWall\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1ad8615, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x6bc33a00, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x6bc33a00, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x6c, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0040.485] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1ad8615, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x6bc59b60, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x6bc59b60, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x6c, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0040.488] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Internet Explorer\\*", lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6bc59b60, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x6bc59b60, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555ca0 [0040.491] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Internet Explorer\\en-US\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ead9a68, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x6bc59b60, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x6bc59b60, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555ce0 [0040.494] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Internet Explorer\\SIGNUP\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x6bc59b60, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x6bc59b60, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555ce0 [0040.705] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Analysis Services\\*", lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x6be6eea0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x6be6eea0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555ca0 [0040.711] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x6be6eea0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x6be6eea0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555ce0 [0040.717] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x6be95000, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x6be95000, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0040.721] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5146e3d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6be95000, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x6be95000, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x10, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0040.724] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x6be95000, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x6be95000, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x10, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0040.729] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x6be95000, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x6be95000, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x10, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0040.729] GetFileType (hFile=0x64) returned 0x1 [0040.729] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x553408 | out: hHeap=0x530000) returned 1 [0040.731] GetFileType (hFile=0x64) returned 0x1 [0040.731] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x553410 | out: hHeap=0x530000) returned 1 [0040.731] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\*", lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x6bebb160, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x6bebb160, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555ca0 [0040.736] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6bebb160, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x6bebb160, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555ce0 [0040.741] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6bebb160, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x6bebb160, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0040.755] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00004_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00004_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00004_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00004_.gif.masked"), dwFlags=0x2) returned 1 [0040.757] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560ce0 | out: hHeap=0x530000) returned 1 [0040.757] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0040.757] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0040.757] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0040.757] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0040.766] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00011_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00011_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00011_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00011_.gif.masked"), dwFlags=0x2) returned 1 [0040.767] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560ce0 | out: hHeap=0x530000) returned 1 [0040.767] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0040.767] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0040.767] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0040.767] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0040.784] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00021_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00021_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00021_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00021_.gif.masked"), dwFlags=0x2) returned 1 [0040.784] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560ce0 | out: hHeap=0x530000) returned 1 [0040.785] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0040.785] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0040.785] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0040.785] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0040.793] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00037_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00037_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00037_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00037_.gif.masked"), dwFlags=0x2) returned 1 [0040.794] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560ce0 | out: hHeap=0x530000) returned 1 [0040.794] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0040.794] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0040.794] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0040.794] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0040.800] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00038_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00038_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00038_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00038_.gif.masked"), dwFlags=0x2) returned 1 [0040.800] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560ce0 | out: hHeap=0x530000) returned 1 [0040.800] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0040.800] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0040.800] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0040.800] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0040.810] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00040_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00040_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00040_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00040_.gif.masked"), dwFlags=0x2) returned 1 [0040.811] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560ce0 | out: hHeap=0x530000) returned 1 [0040.811] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0040.811] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0040.811] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0040.811] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0040.820] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00052_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00052_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00052_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00052_.gif.masked"), dwFlags=0x2) returned 1 [0040.821] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560ce0 | out: hHeap=0x530000) returned 1 [0040.821] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0040.821] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0040.821] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0040.821] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0040.835] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00057_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00057_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00057_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00057_.gif.masked"), dwFlags=0x2) returned 1 [0040.836] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560ce0 | out: hHeap=0x530000) returned 1 [0040.836] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0040.836] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0040.836] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0040.836] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0040.838] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00090_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00090_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00090_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00090_.gif.masked"), dwFlags=0x2) returned 1 [0040.839] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560ce0 | out: hHeap=0x530000) returned 1 [0040.839] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0040.839] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0040.839] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0040.839] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0040.840] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00092_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00092_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00092_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00092_.gif.masked"), dwFlags=0x2) returned 1 [0040.841] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560ce0 | out: hHeap=0x530000) returned 1 [0040.841] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0040.841] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0040.841] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0040.841] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0040.856] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00103_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00103_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00103_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00103_.gif.masked"), dwFlags=0x2) returned 1 [0040.857] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560ce0 | out: hHeap=0x530000) returned 1 [0040.857] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0040.857] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0040.857] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0040.857] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0040.862] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00120_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00120_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00120_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00120_.gif.masked"), dwFlags=0x2) returned 1 [0040.863] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560ce0 | out: hHeap=0x530000) returned 1 [0040.863] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0040.863] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0040.863] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0040.863] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0040.868] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00126_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00126_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00126_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00126_.gif.masked"), dwFlags=0x2) returned 1 [0040.868] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560ce0 | out: hHeap=0x530000) returned 1 [0040.868] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0040.868] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0040.868] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0040.868] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0040.883] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00129_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00129_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00129_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00129_.gif.masked"), dwFlags=0x2) returned 1 [0040.884] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560ce0 | out: hHeap=0x530000) returned 1 [0040.884] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0040.884] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0040.884] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0040.884] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0040.891] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00130_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00130_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00130_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00130_.gif.masked"), dwFlags=0x2) returned 1 [0040.892] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560ce0 | out: hHeap=0x530000) returned 1 [0040.892] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0040.892] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0040.892] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0040.892] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0040.897] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00135_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00135_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00135_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00135_.gif.masked"), dwFlags=0x2) returned 1 [0040.898] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560ce0 | out: hHeap=0x530000) returned 1 [0040.898] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0040.898] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0040.898] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0040.898] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0040.912] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00139_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00139_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00139_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00139_.gif.masked"), dwFlags=0x2) returned 1 [0040.913] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560ce0 | out: hHeap=0x530000) returned 1 [0040.913] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0040.913] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0040.913] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0040.913] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0040.930] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00142_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00142_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00142_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00142_.gif.masked"), dwFlags=0x2) returned 1 [0040.931] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560ce0 | out: hHeap=0x530000) returned 1 [0040.931] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0040.931] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0040.931] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0040.931] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0040.938] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00154_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00154_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00154_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00154_.gif.masked"), dwFlags=0x2) returned 1 [0040.939] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560ce0 | out: hHeap=0x530000) returned 1 [0040.939] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0040.939] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0040.939] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0040.939] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0040.948] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00157_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00157_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00157_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00157_.gif.masked"), dwFlags=0x2) returned 1 [0040.949] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560ce0 | out: hHeap=0x530000) returned 1 [0040.949] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0040.949] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0040.949] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0040.949] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0040.956] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00158_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00158_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00158_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00158_.gif.masked"), dwFlags=0x2) returned 1 [0040.957] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560ce0 | out: hHeap=0x530000) returned 1 [0040.957] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0040.957] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0040.957] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0040.957] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0040.960] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00160_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00160_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00160_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00160_.gif.masked"), dwFlags=0x2) returned 1 [0040.961] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560ce0 | out: hHeap=0x530000) returned 1 [0040.961] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0040.961] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0040.961] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0040.961] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0040.970] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00161_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00161_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00161_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00161_.gif.masked"), dwFlags=0x2) returned 1 [0040.970] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560ce0 | out: hHeap=0x530000) returned 1 [0040.971] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0040.971] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0040.971] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0040.971] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0040.980] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00163_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00163_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00163_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00163_.gif.masked"), dwFlags=0x2) returned 1 [0040.981] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560ce0 | out: hHeap=0x530000) returned 1 [0040.981] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0040.981] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0040.981] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0040.981] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0041.000] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00164_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00164_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00164_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00164_.gif.masked"), dwFlags=0x2) returned 1 [0041.000] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560ce0 | out: hHeap=0x530000) returned 1 [0041.000] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0041.000] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0041.000] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0041.000] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0041.019] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00165_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00165_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00165_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00165_.gif.masked"), dwFlags=0x2) returned 1 [0041.021] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560ce0 | out: hHeap=0x530000) returned 1 [0041.021] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0041.021] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0041.021] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0041.021] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0041.031] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00167_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00167_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00167_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00167_.gif.masked"), dwFlags=0x2) returned 1 [0041.032] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560ce0 | out: hHeap=0x530000) returned 1 [0041.032] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0041.032] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0041.032] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0041.032] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0041.042] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00169_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00169_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00169_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00169_.gif.masked"), dwFlags=0x2) returned 1 [0041.043] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560ce0 | out: hHeap=0x530000) returned 1 [0041.043] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0041.043] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0041.043] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0041.043] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0041.057] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00170_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00170_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00170_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00170_.gif.masked"), dwFlags=0x2) returned 1 [0041.059] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560ce0 | out: hHeap=0x530000) returned 1 [0041.059] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0041.059] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0041.059] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0041.059] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0041.068] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00171_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00171_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00171_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00171_.gif.masked"), dwFlags=0x2) returned 1 [0041.068] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560ce0 | out: hHeap=0x530000) returned 1 [0041.069] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0041.069] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0041.069] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0041.069] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0041.081] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00172_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00172_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00172_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00172_.gif.masked"), dwFlags=0x2) returned 1 [0041.084] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560ce0 | out: hHeap=0x530000) returned 1 [0041.084] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0041.084] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0041.084] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0041.084] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0041.091] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00174_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00174_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00174_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00174_.gif.masked"), dwFlags=0x2) returned 1 [0041.092] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560ce0 | out: hHeap=0x530000) returned 1 [0041.092] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0041.092] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0041.092] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0041.092] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0041.109] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00175_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00175_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00175_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00175_.gif.masked"), dwFlags=0x2) returned 1 [0041.110] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560ce0 | out: hHeap=0x530000) returned 1 [0041.110] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0041.110] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0041.110] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0041.110] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0041.116] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00176_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00176_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00176_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00176_.gif.masked"), dwFlags=0x2) returned 1 [0041.117] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560ce0 | out: hHeap=0x530000) returned 1 [0041.117] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0041.117] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0041.117] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0041.117] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0041.132] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BABY_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\baby_01.mid"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BABY_01.MID.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\baby_01.mid.masked"), dwFlags=0x2) returned 1 [0041.132] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0041.132] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0041.132] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548358 | out: hHeap=0x530000) returned 1 [0041.132] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0041.132] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0041.155] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD10890_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd10890_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD10890_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd10890_.gif.masked"), dwFlags=0x2) returned 1 [0041.156] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560ce0 | out: hHeap=0x530000) returned 1 [0041.156] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0041.156] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0041.156] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0041.156] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0041.179] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD10972_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd10972_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD10972_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd10972_.gif.masked"), dwFlags=0x2) returned 1 [0041.180] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560ce0 | out: hHeap=0x530000) returned 1 [0041.180] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0041.180] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0041.180] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0041.180] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0041.202] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19563_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19563_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19563_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19563_.gif.masked"), dwFlags=0x2) returned 1 [0041.203] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560ce0 | out: hHeap=0x530000) returned 1 [0041.203] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0041.203] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0041.203] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0041.203] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0041.221] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19582_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19582_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19582_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19582_.gif.masked"), dwFlags=0x2) returned 1 [0041.221] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560ce0 | out: hHeap=0x530000) returned 1 [0041.221] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0041.221] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0041.221] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0041.221] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0041.255] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CARBN_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\carbn_01.mid"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CARBN_01.MID.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\carbn_01.mid.masked"), dwFlags=0x2) returned 1 [0041.255] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560ce0 | out: hHeap=0x530000) returned 1 [0041.255] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0041.255] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0041.255] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0041.255] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0041.266] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CMNTY_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\cmnty_01.mid"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CMNTY_01.MID.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\cmnty_01.mid.masked"), dwFlags=0x2) returned 1 [0041.267] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560ce0 | out: hHeap=0x530000) returned 1 [0041.267] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0041.267] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0041.267] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0041.267] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0041.277] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EAST_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\east_01.mid"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EAST_01.MID.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\east_01.mid.masked"), dwFlags=0x2) returned 1 [0041.278] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0041.278] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0041.278] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548358 | out: hHeap=0x530000) returned 1 [0041.278] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0041.278] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0041.290] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EXPLR_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\explr_01.mid"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EXPLR_01.MID.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\explr_01.mid.masked"), dwFlags=0x2) returned 1 [0041.291] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560ce0 | out: hHeap=0x530000) returned 1 [0041.291] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0041.291] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0041.291] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0041.291] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0041.308] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FALL_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fall_01.mid"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FALL_01.MID.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fall_01.mid.masked"), dwFlags=0x2) returned 1 [0041.309] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0041.309] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0041.309] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548358 | out: hHeap=0x530000) returned 1 [0041.309] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0041.309] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0041.326] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FINCL_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fincl_01.mid"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FINCL_01.MID.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fincl_01.mid.masked"), dwFlags=0x2) returned 1 [0041.327] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560ce0 | out: hHeap=0x530000) returned 1 [0041.327] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0041.327] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0041.327] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0041.327] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0041.342] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FINCL_02.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fincl_02.mid"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FINCL_02.MID.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fincl_02.mid.masked"), dwFlags=0x2) returned 1 [0041.342] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560ce0 | out: hHeap=0x530000) returned 1 [0041.342] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0041.342] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0041.342] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0041.342] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0041.353] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\GRDEN_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\grden_01.mid"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\GRDEN_01.MID.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\grden_01.mid.masked"), dwFlags=0x2) returned 1 [0041.354] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560ce0 | out: hHeap=0x530000) returned 1 [0041.354] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0041.354] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0041.354] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0041.354] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0041.363] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\GRID_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\grid_01.mid"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\GRID_01.MID.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\grid_01.mid.masked"), dwFlags=0x2) returned 1 [0041.363] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0041.363] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0041.363] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x548358 | out: hHeap=0x530000) returned 1 [0041.363] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0041.363] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0041.376] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HTECH_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\htech_01.mid"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HTECH_01.MID.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\htech_01.mid.masked"), dwFlags=0x2) returned 1 [0041.377] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560ce0 | out: hHeap=0x530000) returned 1 [0041.377] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0041.377] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x547a90 | out: hHeap=0x530000) returned 1 [0041.377] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552eb8 | out: hHeap=0x530000) returned 1 [0041.377] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x552ea8 | out: hHeap=0x530000) returned 1 [0041.389] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\INDST_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\indst_01.mid"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\INDST_01.MID.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\indst_01.mid.masked"), dwFlags=0x2) returned 1 [0041.390] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560ce0 | out: hHeap=0x530000) returned 1 [0041.390] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560c88 | out: hHeap=0x530000) returned 1 [0041.394] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0075478.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0075478.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0075478.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0075478.gif.masked"), dwFlags=0x2) returned 1 [0041.434] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099145.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099145.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099145.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099145.jpg.masked"), dwFlags=0x2) returned 1 [0041.471] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099147.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099147.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099147.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099147.jpg.masked"), dwFlags=0x2) returned 1 [0041.497] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099148.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099148.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099148.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099148.jpg.masked"), dwFlags=0x2) returned 1 [0041.528] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099150.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099150.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099150.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099150.jpg.masked"), dwFlags=0x2) returned 1 [0041.546] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099152.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099152.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099152.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099152.jpg.masked"), dwFlags=0x2) returned 1 [0041.560] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099154.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099154.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099154.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099154.jpg.masked"), dwFlags=0x2) returned 1 [0041.574] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099155.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099155.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099155.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099155.jpg.masked"), dwFlags=0x2) returned 1 [0041.595] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099156.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099156.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099156.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099156.jpg.masked"), dwFlags=0x2) returned 1 [0041.611] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099157.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099157.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099157.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099157.jpg.masked"), dwFlags=0x2) returned 1 [0041.633] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099160.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099160.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099160.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099160.jpg.masked"), dwFlags=0x2) returned 1 [0041.646] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099161.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099161.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099161.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099161.jpg.masked"), dwFlags=0x2) returned 1 [0041.674] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099162.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099162.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099162.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099162.jpg.masked"), dwFlags=0x2) returned 1 [0041.741] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099165.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099165.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099165.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099165.jpg.masked"), dwFlags=0x2) returned 1 [0041.822] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099166.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099166.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099166.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099166.jpg.masked"), dwFlags=0x2) returned 1 [0041.881] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099167.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099167.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099167.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099167.jpg.masked"), dwFlags=0x2) returned 1 [0041.909] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099168.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099168.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099168.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099168.jpg.masked"), dwFlags=0x2) returned 1 [0041.918] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099185.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099185.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099185.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099185.jpg.masked"), dwFlags=0x2) returned 1 [0041.943] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099186.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099186.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099186.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099186.jpg.masked"), dwFlags=0x2) returned 1 [0041.978] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099187.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099187.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099187.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099187.jpg.masked"), dwFlags=0x2) returned 1 [0041.996] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099188.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099188.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099188.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099188.jpg.masked"), dwFlags=0x2) returned 1 [0042.011] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099189.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099189.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099189.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099189.jpg.masked"), dwFlags=0x2) returned 1 [0042.070] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099190.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099190.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099190.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099190.jpg.masked"), dwFlags=0x2) returned 1 [0042.163] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099191.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099191.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099191.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099191.jpg.masked"), dwFlags=0x2) returned 1 [0042.189] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099192.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099192.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099192.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099192.gif.masked"), dwFlags=0x2) returned 1 [0042.240] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099193.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099193.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099193.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099193.gif.masked"), dwFlags=0x2) returned 1 [0042.273] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099194.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099194.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099194.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099194.gif.masked"), dwFlags=0x2) returned 1 [0042.275] GetFileType (hFile=0x70) returned 0x1 [0042.314] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099195.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099195.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099195.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099195.gif.masked"), dwFlags=0x2) returned 1 [0042.336] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099196.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099196.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099196.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099196.gif.masked"), dwFlags=0x2) returned 1 [0042.353] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099197.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099197.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099197.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099197.gif.masked"), dwFlags=0x2) returned 1 [0042.362] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099198.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099198.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099198.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099198.gif.masked"), dwFlags=0x2) returned 1 [0042.407] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099199.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099199.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099199.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099199.gif.masked"), dwFlags=0x2) returned 1 [0042.432] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099200.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099200.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099200.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099200.gif.masked"), dwFlags=0x2) returned 1 [0042.503] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099201.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099201.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099201.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099201.gif.masked"), dwFlags=0x2) returned 1 [0042.706] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099202.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099202.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099202.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099202.gif.masked"), dwFlags=0x2) returned 1 [0042.713] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099203.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099203.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099203.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099203.gif.masked"), dwFlags=0x2) returned 1 [0042.821] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101856.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101856.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101856.BMP.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101856.bmp.masked"), dwFlags=0x2) returned 1 [0042.884] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101857.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101857.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101857.BMP.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101857.bmp.masked"), dwFlags=0x2) returned 1 [0042.928] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101858.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101858.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101858.BMP.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101858.bmp.masked"), dwFlags=0x2) returned 1 [0042.972] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101859.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101859.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101859.BMP.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101859.bmp.masked"), dwFlags=0x2) returned 1 [0043.017] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101860.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101860.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101860.BMP.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101860.bmp.masked"), dwFlags=0x2) returned 1 [0043.066] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101861.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101861.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101861.BMP.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101861.bmp.masked"), dwFlags=0x2) returned 1 [0043.110] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101862.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101862.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101862.BMP.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101862.bmp.masked"), dwFlags=0x2) returned 1 [0043.165] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101863.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101863.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101863.BMP.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101863.bmp.masked"), dwFlags=0x2) returned 1 [0043.208] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101864.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101864.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101864.BMP.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101864.bmp.masked"), dwFlags=0x2) returned 1 [0043.251] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101865.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101865.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101865.BMP.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101865.bmp.masked"), dwFlags=0x2) returned 1 [0043.285] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101866.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101866.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101866.BMP.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101866.bmp.masked"), dwFlags=0x2) returned 1 [0043.396] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101867.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101867.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101867.BMP.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101867.bmp.masked"), dwFlags=0x2) returned 1 [0043.480] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0144773.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0144773.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0144773.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0144773.jpg.masked"), dwFlags=0x2) returned 1 [0043.518] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145168.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145168.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145168.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145168.jpg.masked"), dwFlags=0x2) returned 1 [0043.585] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145212.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145212.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145212.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145212.jpg.masked"), dwFlags=0x2) returned 1 [0043.635] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145272.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145272.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145272.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145272.jpg.masked"), dwFlags=0x2) returned 1 [0043.658] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145361.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145361.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145361.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145361.jpg.masked"), dwFlags=0x2) returned 1 [0043.679] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145373.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145373.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145373.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145373.jpg.masked"), dwFlags=0x2) returned 1 [0043.712] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145669.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145669.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145669.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145669.jpg.masked"), dwFlags=0x2) returned 1 [0043.751] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145707.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145707.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145707.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145707.jpg.masked"), dwFlags=0x2) returned 1 [0043.791] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145810.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145810.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145810.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145810.jpg.masked"), dwFlags=0x2) returned 1 [0043.832] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145879.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145879.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145879.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145879.jpg.masked"), dwFlags=0x2) returned 1 [0043.868] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145895.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145895.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145895.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145895.jpg.masked"), dwFlags=0x2) returned 1 [0043.915] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145904.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145904.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145904.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145904.jpg.masked"), dwFlags=0x2) returned 1 [0043.974] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0146142.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0146142.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0146142.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0146142.jpg.masked"), dwFlags=0x2) returned 1 [0044.019] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0148309.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0148309.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0148309.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0148309.jpg.masked"), dwFlags=0x2) returned 1 [0044.087] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0148757.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0148757.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0148757.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0148757.jpg.masked"), dwFlags=0x2) returned 1 [0044.126] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0148798.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0148798.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0148798.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0148798.jpg.masked"), dwFlags=0x2) returned 1 [0044.165] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0149018.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0149018.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0149018.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0149018.jpg.masked"), dwFlags=0x2) returned 1 [0044.230] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0149118.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0149118.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0149118.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0149118.jpg.masked"), dwFlags=0x2) returned 1 [0044.299] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0164153.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0164153.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0164153.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0164153.jpg.masked"), dwFlags=0x2) returned 1 [0044.337] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174952.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0174952.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174952.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0174952.jpg.masked"), dwFlags=0x2) returned 1 [0044.397] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0175361.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0175361.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0175361.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0175361.jpg.masked"), dwFlags=0x2) returned 1 [0044.414] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0175428.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0175428.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0175428.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0175428.jpg.masked"), dwFlags=0x2) returned 1 [0044.461] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0177257.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0177257.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0177257.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0177257.jpg.masked"), dwFlags=0x2) returned 1 [0044.550] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0177806.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0177806.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0177806.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0177806.jpg.masked"), dwFlags=0x2) returned 1 [0044.604] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178348.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178348.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178348.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178348.jpg.masked"), dwFlags=0x2) returned 1 [0044.712] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178459.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178459.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178459.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178459.jpg.masked"), dwFlags=0x2) returned 1 [0044.744] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178460.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178460.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178460.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178460.jpg.masked"), dwFlags=0x2) returned 1 [0044.770] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178523.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178523.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178523.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178523.jpg.masked"), dwFlags=0x2) returned 1 [0044.799] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178632.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178632.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178632.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178632.jpg.masked"), dwFlags=0x2) returned 1 [0044.834] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178639.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178639.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178639.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178639.jpg.masked"), dwFlags=0x2) returned 1 [0044.871] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178932.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178932.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178932.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178932.jpg.masked"), dwFlags=0x2) returned 1 [0044.905] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0179963.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0179963.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0179963.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0179963.jpg.masked"), dwFlags=0x2) returned 1 [0044.924] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182689.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0182689.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182689.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0182689.jpg.masked"), dwFlags=0x2) returned 1 [0044.971] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0202045.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0202045.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0202045.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0202045.jpg.masked"), dwFlags=0x2) returned 1 [0045.016] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216112.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0216112.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216112.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0216112.jpg.masked"), dwFlags=0x2) returned 1 [0045.042] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216153.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0216153.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216153.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0216153.jpg.masked"), dwFlags=0x2) returned 1 [0045.079] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0227419.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0227419.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0227419.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0227419.jpg.masked"), dwFlags=0x2) returned 1 [0045.144] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0227558.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0227558.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0227558.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0227558.jpg.masked"), dwFlags=0x2) returned 1 [0045.192] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287641.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287641.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287641.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287641.jpg.masked"), dwFlags=0x2) returned 1 [0045.211] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287642.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287642.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287642.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287642.jpg.masked"), dwFlags=0x2) returned 1 [0045.229] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287643.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287643.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287643.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287643.jpg.masked"), dwFlags=0x2) returned 1 [0045.249] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287644.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287644.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287644.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287644.jpg.masked"), dwFlags=0x2) returned 1 [0045.294] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287645.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287645.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287645.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287645.jpg.masked"), dwFlags=0x2) returned 1 [0045.308] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0289430.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0289430.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0289430.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0289430.jpg.masked"), dwFlags=0x2) returned 1 [0045.323] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309480.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309480.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309480.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309480.jpg.masked"), dwFlags=0x2) returned 1 [0045.347] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309567.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309567.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309567.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309567.jpg.masked"), dwFlags=0x2) returned 1 [0045.390] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309585.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309585.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309585.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309585.jpg.masked"), dwFlags=0x2) returned 1 [0045.425] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309598.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309598.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309598.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309598.jpg.masked"), dwFlags=0x2) returned 1 [0045.470] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309664.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309664.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309664.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309664.jpg.masked"), dwFlags=0x2) returned 1 [0045.492] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309705.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309705.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309705.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309705.jpg.masked"), dwFlags=0x2) returned 1 [0045.548] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0313896.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0313896.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0313896.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0313896.jpg.masked"), dwFlags=0x2) returned 1 [0045.593] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0313965.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0313965.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0313965.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0313965.jpg.masked"), dwFlags=0x2) returned 1 [0045.640] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0313970.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0313970.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0313970.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0313970.jpg.masked"), dwFlags=0x2) returned 1 [0045.704] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0313974.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0313974.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0313974.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0313974.jpg.masked"), dwFlags=0x2) returned 1 [0045.731] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0314068.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0314068.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0314068.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0314068.jpg.masked"), dwFlags=0x2) returned 1 [0045.760] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0315580.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0315580.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0315580.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0315580.jpg.masked"), dwFlags=0x2) returned 1 [0045.786] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0315612.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0315612.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0315612.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0315612.jpg.masked"), dwFlags=0x2) returned 1 [0045.803] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0321179.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0321179.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0321179.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0321179.jpg.masked"), dwFlags=0x2) returned 1 [0045.824] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0337280.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0337280.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0337280.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0337280.jpg.masked"), dwFlags=0x2) returned 1 [0045.842] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341328.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341328.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341328.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341328.jpg.masked"), dwFlags=0x2) returned 1 [0045.860] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341344.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341344.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341344.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341344.jpg.masked"), dwFlags=0x2) returned 1 [0045.890] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341439.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341439.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341439.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341439.jpg.masked"), dwFlags=0x2) returned 1 [0045.938] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341447.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341447.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341447.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341447.jpg.masked"), dwFlags=0x2) returned 1 [0045.987] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341448.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341448.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341448.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341448.jpg.masked"), dwFlags=0x2) returned 1 [0046.025] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341455.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341455.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341455.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341455.jpg.masked"), dwFlags=0x2) returned 1 [0046.084] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341475.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341475.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341475.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341475.jpg.masked"), dwFlags=0x2) returned 1 [0046.103] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341499.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341499.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341499.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341499.jpg.masked"), dwFlags=0x2) returned 1 [0046.114] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341534.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341534.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341534.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341534.jpg.masked"), dwFlags=0x2) returned 1 [0046.140] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341551.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341551.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341551.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341551.jpg.masked"), dwFlags=0x2) returned 1 [0046.171] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341554.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341554.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341554.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341554.jpg.masked"), dwFlags=0x2) returned 1 [0046.213] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341557.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341557.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341557.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341557.jpg.masked"), dwFlags=0x2) returned 1 [0046.243] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341559.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341559.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341559.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341559.jpg.masked"), dwFlags=0x2) returned 1 [0046.298] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341561.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341561.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341561.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341561.jpg.masked"), dwFlags=0x2) returned 1 [0046.309] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341634.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341634.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341634.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341634.jpg.masked"), dwFlags=0x2) returned 1 [0046.352] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341636.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341636.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341636.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341636.jpg.masked"), dwFlags=0x2) returned 1 [0046.364] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341645.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341645.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341645.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341645.jpg.masked"), dwFlags=0x2) returned 1 [0046.386] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341653.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341653.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341653.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341653.jpg.masked"), dwFlags=0x2) returned 1 [0046.404] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341654.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341654.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341654.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341654.jpg.masked"), dwFlags=0x2) returned 1 [0046.427] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341738.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341738.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341738.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341738.jpg.masked"), dwFlags=0x2) returned 1 [0046.451] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341742.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341742.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341742.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341742.jpg.masked"), dwFlags=0x2) returned 1 [0046.551] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382836.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382836.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382836.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382836.jpg.masked"), dwFlags=0x2) returned 1 [0046.731] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382925.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382925.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382925.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382925.jpg.masked"), dwFlags=0x2) returned 1 [0046.847] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382926.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382926.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382926.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382926.jpg.masked"), dwFlags=0x2) returned 1 [0047.008] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382927.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382927.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382927.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382927.jpg.masked"), dwFlags=0x2) returned 1 [0047.148] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382930.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382930.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382930.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382930.jpg.masked"), dwFlags=0x2) returned 1 [0047.318] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382931.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382931.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382931.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382931.jpg.masked"), dwFlags=0x2) returned 1 [0047.450] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382938.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382938.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382938.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382938.jpg.masked"), dwFlags=0x2) returned 1 [0047.587] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382939.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382939.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382939.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382939.jpg.masked"), dwFlags=0x2) returned 1 [0047.701] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382942.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382942.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382942.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382942.jpg.masked"), dwFlags=0x2) returned 1 [0047.813] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382944.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382944.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382944.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382944.jpg.masked"), dwFlags=0x2) returned 1 [0047.922] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382947.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382947.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382947.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382947.jpg.masked"), dwFlags=0x2) returned 1 [0048.061] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382948.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382948.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382948.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382948.jpg.masked"), dwFlags=0x2) returned 1 [0048.183] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382950.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382950.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382950.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382950.jpg.masked"), dwFlags=0x2) returned 1 [0048.366] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382952.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382952.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382952.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382952.jpg.masked"), dwFlags=0x2) returned 1 [0048.478] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382954.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382954.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382954.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382954.jpg.masked"), dwFlags=0x2) returned 1 [0048.624] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382955.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382955.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382955.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382955.jpg.masked"), dwFlags=0x2) returned 1 [0048.739] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382957.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382957.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382957.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382957.jpg.masked"), dwFlags=0x2) returned 1 [0048.849] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382958.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382958.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382958.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382958.jpg.masked"), dwFlags=0x2) returned 1 [0048.950] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382959.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382959.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382959.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382959.jpg.masked"), dwFlags=0x2) returned 1 [0049.060] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382960.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382960.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382960.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382960.jpg.masked"), dwFlags=0x2) returned 1 [0049.166] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382961.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382961.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382961.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382961.jpg.masked"), dwFlags=0x2) returned 1 [0049.278] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382962.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382962.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382962.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382962.jpg.masked"), dwFlags=0x2) returned 1 [0049.384] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382963.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382963.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382963.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382963.jpg.masked"), dwFlags=0x2) returned 1 [0049.504] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382965.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382965.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382965.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382965.jpg.masked"), dwFlags=0x2) returned 1 [0049.634] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382966.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382966.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382966.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382966.jpg.masked"), dwFlags=0x2) returned 1 [0049.877] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382967.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382967.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382967.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382967.jpg.masked"), dwFlags=0x2) returned 1 [0050.002] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382968.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382968.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382968.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382968.jpg.masked"), dwFlags=0x2) returned 1 [0050.104] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382969.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382969.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382969.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382969.jpg.masked"), dwFlags=0x2) returned 1 [0050.192] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382970.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382970.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382970.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382970.jpg.masked"), dwFlags=0x2) returned 1 [0050.310] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384862.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0384862.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384862.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0384862.jpg.masked"), dwFlags=0x2) returned 1 [0050.418] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384885.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0384885.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384885.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0384885.jpg.masked"), dwFlags=0x2) returned 1 [0050.502] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384888.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0384888.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384888.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0384888.jpg.masked"), dwFlags=0x2) returned 1 [0050.727] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384895.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0384895.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384895.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0384895.jpg.masked"), dwFlags=0x2) returned 1 [0050.845] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384900.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0384900.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384900.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0384900.jpg.masked"), dwFlags=0x2) returned 1 [0050.880] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386120.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0386120.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386120.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0386120.jpg.masked"), dwFlags=0x2) returned 1 [0050.925] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386267.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0386267.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386267.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0386267.jpg.masked"), dwFlags=0x2) returned 1 [0050.944] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386270.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0386270.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386270.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0386270.jpg.masked"), dwFlags=0x2) returned 1 [0050.961] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386485.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0386485.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386485.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0386485.jpg.masked"), dwFlags=0x2) returned 1 [0050.998] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386764.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0386764.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386764.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0386764.jpg.masked"), dwFlags=0x2) returned 1 [0051.064] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387337.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0387337.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387337.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0387337.jpg.masked"), dwFlags=0x2) returned 1 [0051.095] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387578.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0387578.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387578.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0387578.jpg.masked"), dwFlags=0x2) returned 1 [0051.138] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387591.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0387591.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387591.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0387591.jpg.masked"), dwFlags=0x2) returned 1 [0051.189] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387604.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0387604.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387604.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0387604.jpg.masked"), dwFlags=0x2) returned 1 [0051.230] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387882.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0387882.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387882.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0387882.jpg.masked"), dwFlags=0x2) returned 1 [0051.266] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387895.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0387895.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387895.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0387895.jpg.masked"), dwFlags=0x2) returned 1 [0051.284] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0390072.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0390072.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0390072.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0390072.jpg.masked"), dwFlags=0x2) returned 1 [0051.521] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400001.PNG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0400001.png"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400001.PNG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0400001.png.masked"), dwFlags=0x2) returned 1 [0051.610] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400002.PNG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0400002.png"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400002.PNG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0400002.png.masked"), dwFlags=0x2) returned 1 [0051.739] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400003.PNG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0400003.png"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400003.PNG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0400003.png.masked"), dwFlags=0x2) returned 1 [0051.844] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400004.PNG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0400004.png"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400004.PNG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0400004.png.masked"), dwFlags=0x2) returned 1 [0051.947] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400005.PNG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0400005.png"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400005.PNG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0400005.png.masked"), dwFlags=0x2) returned 1 [0051.961] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\JAVA_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\java_01.mid"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\JAVA_01.MID.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\java_01.mid.masked"), dwFlags=0x2) returned 1 [0051.970] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\JNGLE_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\jngle_01.mid"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\JNGLE_01.MID.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\jngle_01.mid.masked"), dwFlags=0x2) returned 1 [0051.982] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\MUSIC_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\music_01.mid"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\MUSIC_01.MID.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\music_01.mid.masked"), dwFlags=0x2) returned 1 [0051.994] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NBOOK_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\nbook_01.mid"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NBOOK_01.MID.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\nbook_01.mid.masked"), dwFlags=0x2) returned 1 [0052.004] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\OCEAN_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ocean_01.mid"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\OCEAN_01.MID.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ocean_01.mid.masked"), dwFlags=0x2) returned 1 [0052.018] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\OUTDR_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\outdr_01.mid"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\OUTDR_01.MID.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\outdr_01.mid.masked"), dwFlags=0x2) returned 1 [0052.051] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PAPER_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\paper_01.mid"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PAPER_01.MID.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\paper_01.mid.masked"), dwFlags=0x2) returned 1 [0052.061] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_01.mid"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_01.MID.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_01.mid.masked"), dwFlags=0x2) returned 1 [0052.070] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_02.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_02.mid"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_02.MID.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_02.mid.masked"), dwFlags=0x2) returned 1 [0052.083] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_03.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_03.mid"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_03.MID.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_03.mid.masked"), dwFlags=0x2) returned 1 [0052.093] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_04.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_04.mid"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_04.MID.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_04.mid.masked"), dwFlags=0x2) returned 1 [0052.104] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_05.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_05.mid"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_05.MID.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_05.mid.masked"), dwFlags=0x2) returned 1 [0052.116] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_06.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_06.mid"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_06.MID.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_06.mid.masked"), dwFlags=0x2) returned 1 [0052.125] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_07.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_07.mid"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_07.MID.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_07.mid.masked"), dwFlags=0x2) returned 1 [0052.136] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_08.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_08.mid"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_08.MID.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_08.mid.masked"), dwFlags=0x2) returned 1 [0052.146] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_09.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_09.mid"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_09.MID.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_09.mid.masked"), dwFlags=0x2) returned 1 [0052.155] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_10.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_10.mid"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_10.MID.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_10.mid.masked"), dwFlags=0x2) returned 1 [0052.162] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH00601G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph00601g.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH00601G.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph00601g.gif.masked"), dwFlags=0x2) returned 1 [0052.205] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH00780U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph00780u.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH00780U.BMP.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph00780u.bmp.masked"), dwFlags=0x2) returned 1 [0052.239] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01035U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01035u.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01035U.BMP.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01035u.bmp.masked"), dwFlags=0x2) returned 1 [0052.385] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01046J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01046j.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01046J.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01046j.jpg.masked"), dwFlags=0x2) returned 1 [0052.427] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01179J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01179j.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01179J.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01179j.jpg.masked"), dwFlags=0x2) returned 1 [0052.445] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01213K.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01213k.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01213K.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01213k.jpg.masked"), dwFlags=0x2) returned 1 [0052.455] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01221K.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01221k.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01221K.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01221k.jpg.masked"), dwFlags=0x2) returned 1 [0052.489] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01235U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01235u.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01235U.BMP.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01235u.bmp.masked"), dwFlags=0x2) returned 1 [0052.522] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01236U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01236u.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01236U.BMP.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01236u.bmp.masked"), dwFlags=0x2) returned 1 [0052.619] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01239K.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01239k.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01239K.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01239k.jpg.masked"), dwFlags=0x2) returned 1 [0052.686] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01247U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01247u.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01247U.BMP.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01247u.bmp.masked"), dwFlags=0x2) returned 1 [0052.699] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01255G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01255g.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01255G.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01255g.gif.masked"), dwFlags=0x2) returned 1 [0052.744] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01265U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01265u.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01265U.BMP.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01265u.bmp.masked"), dwFlags=0x2) returned 1 [0052.788] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01332U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01332u.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01332U.BMP.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01332u.bmp.masked"), dwFlags=0x2) returned 1 [0052.832] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01478U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01478u.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01478U.BMP.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01478u.bmp.masked"), dwFlags=0x2) returned 1 [0052.877] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01562U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01562u.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01562U.BMP.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01562u.bmp.masked"), dwFlags=0x2) returned 1 [0052.920] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01607U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01607u.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01607U.BMP.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01607u.bmp.masked"), dwFlags=0x2) returned 1 [0052.974] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01931J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01931j.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01931J.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01931j.jpg.masked"), dwFlags=0x2) returned 1 [0053.002] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02028K.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02028k.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02028K.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02028k.jpg.masked"), dwFlags=0x2) returned 1 [0053.046] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02039U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02039u.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02039U.BMP.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02039u.bmp.masked"), dwFlags=0x2) returned 1 [0053.083] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02040U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02040u.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02040U.BMP.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02040u.bmp.masked"), dwFlags=0x2) returned 1 [0053.113] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02053J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02053j.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02053J.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02053j.jpg.masked"), dwFlags=0x2) returned 1 [0053.146] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02058U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02058u.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02058U.BMP.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02058u.bmp.masked"), dwFlags=0x2) returned 1 [0053.180] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02062U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02062u.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02062U.BMP.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02062u.bmp.masked"), dwFlags=0x2) returned 1 [0053.212] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02069J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02069j.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02069J.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02069j.jpg.masked"), dwFlags=0x2) returned 1 [0053.247] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02071U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02071u.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02071U.BMP.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02071u.bmp.masked"), dwFlags=0x2) returned 1 [0053.282] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02074U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02074u.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02074U.BMP.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02074u.bmp.masked"), dwFlags=0x2) returned 1 [0053.365] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02208U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02208u.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02208U.BMP.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02208u.bmp.masked"), dwFlags=0x2) returned 1 [0053.400] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02223U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02223u.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02223U.BMP.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02223u.bmp.masked"), dwFlags=0x2) returned 1 [0053.435] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02291U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02291u.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02291U.BMP.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02291u.bmp.masked"), dwFlags=0x2) returned 1 [0053.478] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02398U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02398u.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02398U.BMP.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02398u.bmp.masked"), dwFlags=0x2) returned 1 [0053.485] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02412K.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02412k.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02412K.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02412k.jpg.masked"), dwFlags=0x2) returned 1 [0053.519] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02417U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02417u.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02417U.BMP.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02417u.bmp.masked"), dwFlags=0x2) returned 1 [0053.555] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02466U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02466u.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02466U.BMP.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02466u.bmp.masked"), dwFlags=0x2) returned 1 [0053.578] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02470U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02470u.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02470U.BMP.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02470u.bmp.masked"), dwFlags=0x2) returned 1 [0053.613] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02503U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02503u.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02503U.BMP.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02503u.bmp.masked"), dwFlags=0x2) returned 1 [0053.649] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02567J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02567j.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02567J.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02567j.jpg.masked"), dwFlags=0x2) returned 1 [0053.678] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02736G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02736g.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02736G.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02736g.gif.masked"), dwFlags=0x2) returned 1 [0053.721] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02736U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02736u.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02736U.BMP.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02736u.bmp.masked"), dwFlags=0x2) returned 1 [0053.765] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02738U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02738u.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02738U.BMP.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02738u.bmp.masked"), dwFlags=0x2) returned 1 [0053.793] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02740G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02740g.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02740G.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02740g.gif.masked"), dwFlags=0x2) returned 1 [0053.828] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02740U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02740u.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02740U.BMP.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02740u.bmp.masked"), dwFlags=0x2) returned 1 [0053.858] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02742G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02742g.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02742G.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02742g.gif.masked"), dwFlags=0x2) returned 1 [0053.895] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02742U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02742u.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02742U.BMP.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02742u.bmp.masked"), dwFlags=0x2) returned 1 [0053.935] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02743G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02743g.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02743G.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02743g.gif.masked"), dwFlags=0x2) returned 1 [0053.964] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02746G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02746g.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02746G.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02746g.gif.masked"), dwFlags=0x2) returned 1 [0053.999] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02746U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02746u.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02746U.BMP.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02746u.bmp.masked"), dwFlags=0x2) returned 1 [0054.027] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02748G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02748g.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02748G.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02748g.gif.masked"), dwFlags=0x2) returned 1 [0054.060] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02748U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02748u.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02748U.BMP.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02748u.bmp.masked"), dwFlags=0x2) returned 1 [0054.098] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02749G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02749g.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02749G.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02749g.gif.masked"), dwFlags=0x2) returned 1 [0054.134] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02749U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02749u.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02749U.BMP.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02749u.bmp.masked"), dwFlags=0x2) returned 1 [0054.164] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02750G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02750g.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02750G.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02750g.gif.masked"), dwFlags=0x2) returned 1 [0054.268] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02750U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02750u.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02750U.BMP.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02750u.bmp.masked"), dwFlags=0x2) returned 1 [0054.325] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02752G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02752g.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02752G.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02752g.gif.masked"), dwFlags=0x2) returned 1 [0054.361] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02752U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02752u.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02752U.BMP.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02752u.bmp.masked"), dwFlags=0x2) returned 1 [0054.482] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02753U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02753u.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02753U.BMP.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02753u.bmp.masked"), dwFlags=0x2) returned 1 [0054.678] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02754U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02754u.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02754U.BMP.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02754u.bmp.masked"), dwFlags=0x2) returned 1 [0054.786] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02755U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02755u.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02755U.BMP.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02755u.bmp.masked"), dwFlags=0x2) returned 1 [0054.996] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02756U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02756u.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02756U.BMP.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02756u.bmp.masked"), dwFlags=0x2) returned 1 [0055.200] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02757U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02757u.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02757U.BMP.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02757u.bmp.masked"), dwFlags=0x2) returned 1 [0055.422] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02758U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02758u.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02758U.BMP.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02758u.bmp.masked"), dwFlags=0x2) returned 1 [0055.464] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02759J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02759j.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02759J.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02759j.jpg.masked"), dwFlags=0x2) returned 1 [0055.525] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02810J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02810j.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02810J.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02810j.jpg.masked"), dwFlags=0x2) returned 1 [0055.590] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02829J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02829j.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02829J.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02829j.jpg.masked"), dwFlags=0x2) returned 1 [0055.621] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02845G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02845g.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02845G.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02845g.gif.masked"), dwFlags=0x2) returned 1 [0055.640] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02897J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02897j.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02897J.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02897j.jpg.masked"), dwFlags=0x2) returned 1 [0055.659] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03011U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03011u.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03011U.BMP.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03011u.bmp.masked"), dwFlags=0x2) returned 1 [0055.668] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03012U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03012u.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03012U.BMP.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03012u.bmp.masked"), dwFlags=0x2) returned 1 [0055.690] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03014_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03014_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03014_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03014_.gif.masked"), dwFlags=0x2) returned 1 [0055.727] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03041I.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03041i.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03041I.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03041i.jpg.masked"), dwFlags=0x2) returned 1 [0055.766] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03143I.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03143i.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03143I.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03143i.jpg.masked"), dwFlags=0x2) returned 1 [0055.812] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03205I.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03205i.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03205I.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03205i.jpg.masked"), dwFlags=0x2) returned 1 [0055.858] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03224I.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03224i.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03224I.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03224i.jpg.masked"), dwFlags=0x2) returned 1 [0055.875] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03379I.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03379i.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03379I.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03379i.jpg.masked"), dwFlags=0x2) returned 1 [0055.891] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03380I.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03380i.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03380I.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03380i.jpg.masked"), dwFlags=0x2) returned 1 [0055.942] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03425I.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03425i.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03425I.JPG.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03425i.jpg.masked"), dwFlags=0x2) returned 1 [0055.953] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ROAD_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\road_01.mid"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ROAD_01.MID.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\road_01.mid.masked"), dwFlags=0x2) returned 1 [0055.967] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SAFRI_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\safri_01.mid"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SAFRI_01.MID.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\safri_01.mid.masked"), dwFlags=0x2) returned 1 [0055.976] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SCHOL_02.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\schol_02.mid"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SCHOL_02.MID.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\schol_02.mid.masked"), dwFlags=0x2) returned 1 [0055.985] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SHOW_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\show_01.mid"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SHOW_01.MID.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\show_01.mid.masked"), dwFlags=0x2) returned 1 [0055.997] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SPACE_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\space_01.mid"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SPACE_01.MID.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\space_01.mid.masked"), dwFlags=0x2) returned 1 [0056.008] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SPRNG_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sprng_01.mid"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SPRNG_01.MID.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sprng_01.mid.masked"), dwFlags=0x2) returned 1 [0056.027] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SUMER_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sumer_01.mid"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SUMER_01.MID.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sumer_01.mid.masked"), dwFlags=0x2) returned 1 [0056.040] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SWEST_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\swest_01.mid"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SWEST_01.MID.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\swest_01.mid.masked"), dwFlags=0x2) returned 1 [0056.060] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\URBAN_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\urban_01.mid"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\URBAN_01.MID.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\urban_01.mid.masked"), dwFlags=0x2) returned 1 [0056.071] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\VCTRN_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\vctrn_01.mid"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\VCTRN_01.MID.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\vctrn_01.mid.masked"), dwFlags=0x2) returned 1 [0056.075] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01219_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01219_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01219_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01219_.gif.masked"), dwFlags=0x2) returned 1 [0056.077] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01237_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01237_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01237_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01237_.gif.masked"), dwFlags=0x2) returned 1 [0056.083] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01238_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01238_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01238_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01238_.gif.masked"), dwFlags=0x2) returned 1 [0056.085] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01239_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01239_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01239_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01239_.gif.masked"), dwFlags=0x2) returned 1 [0056.088] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01240_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01240_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01240_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01240_.gif.masked"), dwFlags=0x2) returned 1 [0056.090] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01241_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01241_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01241_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01241_.gif.masked"), dwFlags=0x2) returned 1 [0056.092] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01242_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01242_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01242_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01242_.gif.masked"), dwFlags=0x2) returned 1 [0056.096] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01243_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01243_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01243_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01243_.gif.masked"), dwFlags=0x2) returned 1 [0056.099] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01244_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01244_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01244_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01244_.gif.masked"), dwFlags=0x2) returned 1 [0056.103] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01245_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01245_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01245_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01245_.gif.masked"), dwFlags=0x2) returned 1 [0056.105] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01246_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01246_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01246_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01246_.gif.masked"), dwFlags=0x2) returned 1 [0056.112] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01253_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01253_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01253_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01253_.gif.masked"), dwFlags=0x2) returned 1 [0056.114] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01268_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01268_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01268_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01268_.gif.masked"), dwFlags=0x2) returned 1 [0056.117] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01292_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01292_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01292_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01292_.gif.masked"), dwFlags=0x2) returned 1 [0056.121] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01293_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01293_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01293_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01293_.gif.masked"), dwFlags=0x2) returned 1 [0056.123] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01294_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01294_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01294_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01294_.gif.masked"), dwFlags=0x2) returned 1 [0056.128] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01295_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01295_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01295_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01295_.gif.masked"), dwFlags=0x2) returned 1 [0056.130] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01296_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01296_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01296_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01296_.gif.masked"), dwFlags=0x2) returned 1 [0056.133] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01297_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01297_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01297_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01297_.gif.masked"), dwFlags=0x2) returned 1 [0056.136] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01298_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01298_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01298_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01298_.gif.masked"), dwFlags=0x2) returned 1 [0056.139] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01299_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01299_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01299_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01299_.gif.masked"), dwFlags=0x2) returned 1 [0056.142] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01300_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01300_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01300_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01300_.gif.masked"), dwFlags=0x2) returned 1 [0056.145] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01301_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01301_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01301_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01301_.gif.masked"), dwFlags=0x2) returned 1 [0056.157] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01304G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01304g.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01304G.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01304g.gif.masked"), dwFlags=0x2) returned 1 [0056.160] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01330_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01330_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01330_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01330_.gif.masked"), dwFlags=0x2) returned 1 [0056.167] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01734_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01734_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01734_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01734_.gif.masked"), dwFlags=0x2) returned 1 [0056.171] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01740_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01740_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01740_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01740_.gif.masked"), dwFlags=0x2) returned 1 [0056.177] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01742_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01742_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01742_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01742_.gif.masked"), dwFlags=0x2) returned 1 [0056.182] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01743_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01743_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01743_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01743_.gif.masked"), dwFlags=0x2) returned 1 [0056.185] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01744_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01744_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01744_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01744_.gif.masked"), dwFlags=0x2) returned 1 [0056.189] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01745_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01745_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01745_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01745_.gif.masked"), dwFlags=0x2) returned 1 [0056.193] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01746_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01746_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01746_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01746_.gif.masked"), dwFlags=0x2) returned 1 [0056.196] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01747_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01747_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01747_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01747_.gif.masked"), dwFlags=0x2) returned 1 [0056.200] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01748_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01748_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01748_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01748_.gif.masked"), dwFlags=0x2) returned 1 [0056.203] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01749_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01749_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01749_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01749_.gif.masked"), dwFlags=0x2) returned 1 [0056.207] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01750_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01750_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01750_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01750_.gif.masked"), dwFlags=0x2) returned 1 [0056.210] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01751_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01751_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01751_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01751_.gif.masked"), dwFlags=0x2) returned 1 [0056.213] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01770_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01770_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01770_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01770_.gif.masked"), dwFlags=0x2) returned 1 [0056.219] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01838_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01838_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01838_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01838_.gif.masked"), dwFlags=0x2) returned 1 [0056.223] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01839_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01839_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01839_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01839_.gif.masked"), dwFlags=0x2) returned 1 [0056.227] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01840_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01840_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01840_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01840_.gif.masked"), dwFlags=0x2) returned 1 [0056.231] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01842_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01842_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01842_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01842_.gif.masked"), dwFlags=0x2) returned 1 [0056.239] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01843_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01843_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01843_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01843_.gif.masked"), dwFlags=0x2) returned 1 [0056.246] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB02229_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb02229_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB02229_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb02229_.gif.masked"), dwFlags=0x2) returned 1 [0056.256] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WNTER_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wnter_01.mid"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WNTER_01.MID.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wnter_01.mid.masked"), dwFlags=0x2) returned 1 [0056.262] GetFileType (hFile=0x6c) returned 0x1 [0056.266] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56406370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x752c2980, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x752c2980, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0056.273] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56406370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x752e8ae0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x752e8ae0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x6c, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0056.279] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143743.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143743.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143743.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143743.gif.masked"), dwFlags=0x2) returned 1 [0056.281] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143744.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143744.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143744.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143744.gif.masked"), dwFlags=0x2) returned 1 [0056.291] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143745.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143745.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143745.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143745.gif.masked"), dwFlags=0x2) returned 1 [0056.295] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143746.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143746.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143746.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143746.gif.masked"), dwFlags=0x2) returned 1 [0056.304] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143748.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143748.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143748.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143748.gif.masked"), dwFlags=0x2) returned 1 [0056.311] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143749.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143749.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143749.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143749.gif.masked"), dwFlags=0x2) returned 1 [0056.315] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143750.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143750.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143750.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143750.gif.masked"), dwFlags=0x2) returned 1 [0056.318] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143752.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143752.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143752.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143752.gif.masked"), dwFlags=0x2) returned 1 [0056.328] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143753.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143753.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143753.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143753.gif.masked"), dwFlags=0x2) returned 1 [0056.332] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143754.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143754.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143754.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143754.gif.masked"), dwFlags=0x2) returned 1 [0056.337] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143758.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143758.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143758.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143758.gif.masked"), dwFlags=0x2) returned 1 [0056.345] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00516L.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb00516l.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00516L.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb00516l.gif.masked"), dwFlags=0x2) returned 1 [0056.357] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00531L.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb00531l.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00531L.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb00531l.gif.masked"), dwFlags=0x2) returned 1 [0056.369] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00673L.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb00673l.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00673L.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb00673l.gif.masked"), dwFlags=0x2) returned 1 [0056.384] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00703L.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb00703l.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00703L.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb00703l.gif.masked"), dwFlags=0x2) returned 1 [0056.397] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00760L.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb00760l.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00760L.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb00760l.gif.masked"), dwFlags=0x2) returned 1 [0056.408] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00780L.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb00780l.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00780L.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb00780l.gif.masked"), dwFlags=0x2) returned 1 [0056.414] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB01741L.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb01741l.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB01741L.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb01741l.gif.masked"), dwFlags=0x2) returned 1 [0056.418] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02039_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02039_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02039_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02039_.gif.masked"), dwFlags=0x2) returned 1 [0056.423] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02055_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02055_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02055_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02055_.gif.masked"), dwFlags=0x2) returned 1 [0056.426] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02073_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02073_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02073_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02073_.gif.masked"), dwFlags=0x2) returned 1 [0056.430] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02074_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02074_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02074_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02074_.gif.masked"), dwFlags=0x2) returned 1 [0056.433] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02077_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02077_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02077_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02077_.gif.masked"), dwFlags=0x2) returned 1 [0056.438] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02082_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02082_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02082_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02082_.gif.masked"), dwFlags=0x2) returned 1 [0056.443] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02085_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02085_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02085_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02085_.gif.masked"), dwFlags=0x2) returned 1 [0056.447] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02097_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02097_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02097_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02097_.gif.masked"), dwFlags=0x2) returned 1 [0056.456] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02106_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02106_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02106_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02106_.gif.masked"), dwFlags=0x2) returned 1 [0056.461] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02116_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02116_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02116_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02116_.gif.masked"), dwFlags=0x2) returned 1 [0056.479] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02134_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02134_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02134_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02134_.gif.masked"), dwFlags=0x2) returned 1 [0056.483] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02187_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02187_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02187_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02187_.gif.masked"), dwFlags=0x2) returned 1 [0056.539] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02198_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02198_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02198_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02198_.gif.masked"), dwFlags=0x2) returned 1 [0056.548] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02201_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02201_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02201_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02201_.gif.masked"), dwFlags=0x2) returned 1 [0056.556] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02214_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02214_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02214_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02214_.gif.masked"), dwFlags=0x2) returned 1 [0056.598] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02218_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02218_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02218_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02218_.gif.masked"), dwFlags=0x2) returned 1 [0056.604] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x756087c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x756087c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555ce0 [0056.609] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c9cf70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x756087c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x756087c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0056.613] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Adjacency.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\adjacency.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Adjacency.xml.masked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\adjacency.xml.masked"), dwFlags=0x2) returned 1 [0056.618] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Angles.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\angles.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Angles.xml.masked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\angles.xml.masked"), dwFlags=0x2) returned 1 [0056.623] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Apex.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\apex.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Apex.xml.masked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\apex.xml.masked"), dwFlags=0x2) returned 1 [0056.627] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Apothecary.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\apothecary.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Apothecary.xml.masked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\apothecary.xml.masked"), dwFlags=0x2) returned 1 [0056.630] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Aspect.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\aspect.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Aspect.xml.masked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\aspect.xml.masked"), dwFlags=0x2) returned 1 [0056.634] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Austin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\austin.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Austin.xml.masked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\austin.xml.masked"), dwFlags=0x2) returned 1 [0056.637] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Black Tie.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\black tie.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Black Tie.xml.masked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\black tie.xml.masked"), dwFlags=0x2) returned 1 [0056.640] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Civic.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\civic.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Civic.xml.masked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\civic.xml.masked"), dwFlags=0x2) returned 1 [0056.643] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Clarity.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\clarity.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Clarity.xml.masked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\clarity.xml.masked"), dwFlags=0x2) returned 1 [0056.647] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Composite.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\composite.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Composite.xml.masked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\composite.xml.masked"), dwFlags=0x2) returned 1 [0056.650] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Concourse.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\concourse.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Concourse.xml.masked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\concourse.xml.masked"), dwFlags=0x2) returned 1 [0056.654] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Couture.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\couture.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Couture.xml.masked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\couture.xml.masked"), dwFlags=0x2) returned 1 [0056.657] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Elemental.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\elemental.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Elemental.xml.masked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\elemental.xml.masked"), dwFlags=0x2) returned 1 [0056.660] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Equity.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\equity.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Equity.xml.masked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\equity.xml.masked"), dwFlags=0x2) returned 1 [0056.666] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Essential.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\essential.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Essential.xml.masked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\essential.xml.masked"), dwFlags=0x2) returned 1 [0056.670] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Executive.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\executive.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Executive.xml.masked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\executive.xml.masked"), dwFlags=0x2) returned 1 [0056.673] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Flow.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\flow.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Flow.xml.masked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\flow.xml.masked"), dwFlags=0x2) returned 1 [0056.677] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Foundry.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\foundry.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Foundry.xml.masked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\foundry.xml.masked"), dwFlags=0x2) returned 1 [0056.681] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Grayscale.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\grayscale.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Grayscale.xml.masked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\grayscale.xml.masked"), dwFlags=0x2) returned 1 [0056.684] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Grid.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\grid.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Grid.xml.masked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\grid.xml.masked"), dwFlags=0x2) returned 1 [0056.688] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Hardcover.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\hardcover.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Hardcover.xml.masked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\hardcover.xml.masked"), dwFlags=0x2) returned 1 [0056.691] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Horizon.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\horizon.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Horizon.xml.masked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\horizon.xml.masked"), dwFlags=0x2) returned 1 [0056.694] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Median.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\median.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Median.xml.masked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\median.xml.masked"), dwFlags=0x2) returned 1 [0056.697] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Metro.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\metro.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Metro.xml.masked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\metro.xml.masked"), dwFlags=0x2) returned 1 [0056.701] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Module.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\module.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Module.xml.masked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\module.xml.masked"), dwFlags=0x2) returned 1 [0056.704] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Newsprint.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\newsprint.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Newsprint.xml.masked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\newsprint.xml.masked"), dwFlags=0x2) returned 1 [0056.708] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Opulent.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\opulent.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Opulent.xml.masked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\opulent.xml.masked"), dwFlags=0x2) returned 1 [0056.712] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Oriel.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\oriel.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Oriel.xml.masked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\oriel.xml.masked"), dwFlags=0x2) returned 1 [0056.716] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Origin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\origin.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Origin.xml.masked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\origin.xml.masked"), dwFlags=0x2) returned 1 [0056.720] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Paper.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\paper.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Paper.xml.masked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\paper.xml.masked"), dwFlags=0x2) returned 1 [0056.723] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Perspective.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\perspective.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Perspective.xml.masked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\perspective.xml.masked"), dwFlags=0x2) returned 1 [0056.726] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Pushpin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\pushpin.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Pushpin.xml.masked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\pushpin.xml.masked"), dwFlags=0x2) returned 1 [0056.729] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Slipstream.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\slipstream.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Slipstream.xml.masked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\slipstream.xml.masked"), dwFlags=0x2) returned 1 [0056.732] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Solstice.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\solstice.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Solstice.xml.masked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\solstice.xml.masked"), dwFlags=0x2) returned 1 [0056.736] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Technic.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\technic.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Technic.xml.masked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\technic.xml.masked"), dwFlags=0x2) returned 1 [0056.739] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Thatch.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\thatch.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Thatch.xml.masked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\thatch.xml.masked"), dwFlags=0x2) returned 1 [0056.742] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Trek.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\trek.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Trek.xml.masked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\trek.xml.masked"), dwFlags=0x2) returned 1 [0056.746] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Urban.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\urban.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Urban.xml.masked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\urban.xml.masked"), dwFlags=0x2) returned 1 [0056.749] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Verve.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\verve.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Verve.xml.masked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\verve.xml.masked"), dwFlags=0x2) returned 1 [0056.753] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Waveform.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\waveform.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Waveform.xml.masked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\waveform.xml.masked"), dwFlags=0x2) returned 1 [0056.757] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x75785580, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x75785580, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0056.766] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528a9ed0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x75785580, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x75785580, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0056.773] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Adjacency.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\adjacency.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Adjacency.xml.masked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\adjacency.xml.masked"), dwFlags=0x2) returned 1 [0056.780] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Angles.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\angles.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Angles.xml.masked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\angles.xml.masked"), dwFlags=0x2) returned 1 [0056.787] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Apex.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\apex.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Apex.xml.masked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\apex.xml.masked"), dwFlags=0x2) returned 1 [0056.793] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Apothecary.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\apothecary.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Apothecary.xml.masked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\apothecary.xml.masked"), dwFlags=0x2) returned 1 [0056.798] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Aspect.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\aspect.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Aspect.xml.masked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\aspect.xml.masked"), dwFlags=0x2) returned 1 [0056.806] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Austin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\austin.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Austin.xml.masked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\austin.xml.masked"), dwFlags=0x2) returned 1 [0056.812] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Black Tie.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\black tie.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Black Tie.xml.masked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\black tie.xml.masked"), dwFlags=0x2) returned 1 [0056.818] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Civic.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\civic.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Civic.xml.masked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\civic.xml.masked"), dwFlags=0x2) returned 1 [0056.824] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Clarity.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\clarity.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Clarity.xml.masked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\clarity.xml.masked"), dwFlags=0x2) returned 1 [0056.830] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Composite.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\composite.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Composite.xml.masked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\composite.xml.masked"), dwFlags=0x2) returned 1 [0056.835] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Concourse.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\concourse.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Concourse.xml.masked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\concourse.xml.masked"), dwFlags=0x2) returned 1 [0056.842] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Couture.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\couture.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Couture.xml.masked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\couture.xml.masked"), dwFlags=0x2) returned 1 [0056.848] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Elemental.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\elemental.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Elemental.xml.masked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\elemental.xml.masked"), dwFlags=0x2) returned 1 [0056.854] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Equity.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\equity.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Equity.xml.masked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\equity.xml.masked"), dwFlags=0x2) returned 1 [0056.860] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Essential.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\essential.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Essential.xml.masked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\essential.xml.masked"), dwFlags=0x2) returned 1 [0056.866] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Executive.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\executive.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Executive.xml.masked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\executive.xml.masked"), dwFlags=0x2) returned 1 [0056.872] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Flow.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\flow.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Flow.xml.masked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\flow.xml.masked"), dwFlags=0x2) returned 1 [0056.879] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Foundry.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\foundry.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Foundry.xml.masked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\foundry.xml.masked"), dwFlags=0x2) returned 1 [0056.885] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Grid.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\grid.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Grid.xml.masked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\grid.xml.masked"), dwFlags=0x2) returned 1 [0056.891] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Hardcover.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\hardcover.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Hardcover.xml.masked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\hardcover.xml.masked"), dwFlags=0x2) returned 1 [0056.897] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Horizon.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\horizon.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Horizon.xml.masked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\horizon.xml.masked"), dwFlags=0x2) returned 1 [0056.903] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Median.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\median.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Median.xml.masked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\median.xml.masked"), dwFlags=0x2) returned 1 [0056.910] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Metro.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\metro.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Metro.xml.masked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\metro.xml.masked"), dwFlags=0x2) returned 1 [0056.917] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Module.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\module.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Module.xml.masked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\module.xml.masked"), dwFlags=0x2) returned 1 [0056.923] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Newsprint.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\newsprint.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Newsprint.xml.masked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\newsprint.xml.masked"), dwFlags=0x2) returned 1 [0056.937] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office 2.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\office 2.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office 2.xml.masked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\office 2.xml.masked"), dwFlags=0x2) returned 1 [0056.943] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic 2.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\office classic 2.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic 2.xml.masked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\office classic 2.xml.masked"), dwFlags=0x2) returned 1 [0056.950] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\office classic.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic.xml.masked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\office classic.xml.masked"), dwFlags=0x2) returned 1 [0056.956] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Opulent.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\opulent.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Opulent.xml.masked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\opulent.xml.masked"), dwFlags=0x2) returned 1 [0056.962] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Oriel.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\oriel.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Oriel.xml.masked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\oriel.xml.masked"), dwFlags=0x2) returned 1 [0056.968] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Origin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\origin.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Origin.xml.masked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\origin.xml.masked"), dwFlags=0x2) returned 1 [0056.975] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Paper.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\paper.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Paper.xml.masked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\paper.xml.masked"), dwFlags=0x2) returned 1 [0056.981] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Perspective.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\perspective.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Perspective.xml.masked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\perspective.xml.masked"), dwFlags=0x2) returned 1 [0056.988] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Pushpin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\pushpin.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Pushpin.xml.masked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\pushpin.xml.masked"), dwFlags=0x2) returned 1 [0056.994] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Slipstream.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\slipstream.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Slipstream.xml.masked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\slipstream.xml.masked"), dwFlags=0x2) returned 1 [0057.001] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Solstice.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\solstice.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Solstice.xml.masked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\solstice.xml.masked"), dwFlags=0x2) returned 1 [0057.007] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Technic.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\technic.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Technic.xml.masked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\technic.xml.masked"), dwFlags=0x2) returned 1 [0057.014] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Thatch.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\thatch.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Thatch.xml.masked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\thatch.xml.masked"), dwFlags=0x2) returned 1 [0057.021] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Trek.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\trek.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Trek.xml.masked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\trek.xml.masked"), dwFlags=0x2) returned 1 [0057.028] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Urban.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\urban.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Urban.xml.masked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\urban.xml.masked"), dwFlags=0x2) returned 1 [0057.034] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Verve.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\verve.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Verve.xml.masked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\verve.xml.masked"), dwFlags=0x2) returned 1 [0057.042] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Waveform.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\waveform.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Waveform.xml.masked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\waveform.xml.masked"), dwFlags=0x2) returned 1 [0057.047] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x75a32e40, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x75a32e40, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555ce0 [0057.051] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x75a58fa0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x75a58fa0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0057.054] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\1033\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x75a58fa0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x75a58fa0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x6c, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0057.409] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\1033\\CAGCAT10.MML" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\1033\\cagcat10.mml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\1033\\CAGCAT10.MML.masked" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\1033\\cagcat10.mml.masked"), dwFlags=0x2) returned 1 [0057.882] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\CAGCAT10.MMW" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\cagcat10.mmw"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\CAGCAT10.MMW.masked" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\cagcat10.mmw.masked"), dwFlags=0x2) returned 1 [0057.915] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\ELPHRG01.WAV" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\elphrg01.wav"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\ELPHRG01.WAV.masked" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\elphrg01.wav.masked"), dwFlags=0x2) returned 1 [0057.947] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0214098.WAV" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0214098.wav"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0214098.WAV.masked" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0214098.wav.masked"), dwFlags=0x2) returned 1 [0057.956] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0234687.GIF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0234687.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0234687.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0234687.gif.masked"), dwFlags=0x2) returned 1 [0057.980] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0283209.GIF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0283209.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0283209.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0283209.gif.masked"), dwFlags=0x2) returned 1 [0058.010] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0284916.JPG" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0284916.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0284916.JPG.masked" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0284916.jpg.masked"), dwFlags=0x2) returned 1 [0058.024] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0295241.GIF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0295241.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0295241.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0295241.gif.masked"), dwFlags=0x2) returned 1 [0058.041] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0300520.GIF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0300520.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0300520.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0300520.gif.masked"), dwFlags=0x2) returned 1 [0058.070] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0302827.JPG" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0302827.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0302827.JPG.masked" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0302827.jpg.masked"), dwFlags=0x2) returned 1 [0058.083] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0302953.JPG" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0302953.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0302953.JPG.masked" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0302953.jpg.masked"), dwFlags=0x2) returned 1 [0058.110] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0315447.JPG" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0315447.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0315447.JPG.masked" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0315447.jpg.masked"), dwFlags=0x2) returned 1 [0058.120] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeef015d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x76476d20, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x76476d20, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0058.124] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\1033\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeef015d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x76476d20, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x76476d20, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x6c, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0058.608] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\1033\\OFFICE10.MML" (normalized: "c:\\program files\\microsoft office\\media\\office14\\1033\\office10.mml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\1033\\OFFICE10.MML.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\1033\\office10.mml.masked"), dwFlags=0x2) returned 1 [0058.628] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51767f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7695fa80, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x7695fa80, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x6c, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0058.634] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5178e0b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7695fa80, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x7695fa80, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x6c, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0058.640] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10253_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10253_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10253_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10253_.gif.masked"), dwFlags=0x2) returned 1 [0058.643] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10254_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10254_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10254_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10254_.gif.masked"), dwFlags=0x2) returned 1 [0058.646] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10255_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10255_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10255_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10255_.gif.masked"), dwFlags=0x2) returned 1 [0058.650] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10263_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10263_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10263_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10263_.gif.masked"), dwFlags=0x2) returned 1 [0058.653] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10264_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10264_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10264_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10264_.gif.masked"), dwFlags=0x2) returned 1 [0058.656] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10265_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10265_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10265_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10265_.gif.masked"), dwFlags=0x2) returned 1 [0058.659] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10266_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10266_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10266_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10266_.gif.masked"), dwFlags=0x2) returned 1 [0058.661] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10267_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10267_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10267_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10267_.gif.masked"), dwFlags=0x2) returned 1 [0058.664] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10268_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10268_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10268_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10268_.gif.masked"), dwFlags=0x2) returned 1 [0058.669] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10297_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10297_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10297_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10297_.gif.masked"), dwFlags=0x2) returned 1 [0058.674] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10298_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10298_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10298_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10298_.gif.masked"), dwFlags=0x2) returned 1 [0058.677] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10299_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10299_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10299_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10299_.gif.masked"), dwFlags=0x2) returned 1 [0058.680] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10300_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10300_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10300_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10300_.gif.masked"), dwFlags=0x2) returned 1 [0058.683] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10301_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10301_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10301_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10301_.gif.masked"), dwFlags=0x2) returned 1 [0058.686] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10302_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10302_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10302_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10302_.gif.masked"), dwFlags=0x2) returned 1 [0058.689] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10335_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10335_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10335_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10335_.gif.masked"), dwFlags=0x2) returned 1 [0058.693] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10336_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10336_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10336_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10336_.gif.masked"), dwFlags=0x2) returned 1 [0058.703] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10337_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10337_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10337_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10337_.gif.masked"), dwFlags=0x2) returned 1 [0058.707] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14513_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14513_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14513_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14513_.gif.masked"), dwFlags=0x2) returned 1 [0058.710] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14514_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14514_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14514_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14514_.gif.masked"), dwFlags=0x2) returned 1 [0058.712] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14515_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14515_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14515_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14515_.gif.masked"), dwFlags=0x2) returned 1 [0058.715] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14528_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14528_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14528_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14528_.gif.masked"), dwFlags=0x2) returned 1 [0058.718] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14529_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14529_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14529_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14529_.gif.masked"), dwFlags=0x2) returned 1 [0058.721] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14530_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14530_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14530_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14530_.gif.masked"), dwFlags=0x2) returned 1 [0058.723] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14531_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14531_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14531_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14531_.gif.masked"), dwFlags=0x2) returned 1 [0058.726] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14532_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14532_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14532_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14532_.gif.masked"), dwFlags=0x2) returned 1 [0058.728] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14533_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14533_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14533_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14533_.gif.masked"), dwFlags=0x2) returned 1 [0058.731] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14565_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14565_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14565_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14565_.gif.masked"), dwFlags=0x2) returned 1 [0058.734] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14578_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14578_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14578_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14578_.gif.masked"), dwFlags=0x2) returned 1 [0058.737] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14579_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14579_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14579_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14579_.gif.masked"), dwFlags=0x2) returned 1 [0058.740] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14580_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14580_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14580_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14580_.gif.masked"), dwFlags=0x2) returned 1 [0058.743] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14581_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14581_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14581_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14581_.gif.masked"), dwFlags=0x2) returned 1 [0058.745] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14582_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14582_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14582_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14582_.gif.masked"), dwFlags=0x2) returned 1 [0058.748] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14583_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14583_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14583_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14583_.gif.masked"), dwFlags=0x2) returned 1 [0058.750] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14654_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14654_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14654_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14654_.gif.masked"), dwFlags=0x2) returned 1 [0058.753] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14655_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14655_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14655_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14655_.gif.masked"), dwFlags=0x2) returned 1 [0058.755] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14656_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14656_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14656_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14656_.gif.masked"), dwFlags=0x2) returned 1 [0058.756] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14691_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14691_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14691_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14691_.gif.masked"), dwFlags=0x2) returned 1 [0058.759] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14692_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14692_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14692_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14692_.gif.masked"), dwFlags=0x2) returned 1 [0058.761] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14693_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14693_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14693_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14693_.gif.masked"), dwFlags=0x2) returned 1 [0058.764] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14752_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14752_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14752_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14752_.gif.masked"), dwFlags=0x2) returned 1 [0058.768] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14753_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14753_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14753_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14753_.gif.masked"), dwFlags=0x2) returned 1 [0058.770] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14754_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14754_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14754_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14754_.gif.masked"), dwFlags=0x2) returned 1 [0058.772] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14755_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14755_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14755_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14755_.gif.masked"), dwFlags=0x2) returned 1 [0058.774] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14756_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14756_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14756_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14756_.gif.masked"), dwFlags=0x2) returned 1 [0058.776] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14757_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14757_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14757_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14757_.gif.masked"), dwFlags=0x2) returned 1 [0058.780] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14790_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14790_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14790_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14790_.gif.masked"), dwFlags=0x2) returned 1 [0058.783] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14791_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14791_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14791_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14791_.gif.masked"), dwFlags=0x2) returned 1 [0058.785] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14792_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14792_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14792_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14792_.gif.masked"), dwFlags=0x2) returned 1 [0058.788] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14793_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14793_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14793_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14793_.gif.masked"), dwFlags=0x2) returned 1 [0058.790] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14794_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14794_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14794_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14794_.gif.masked"), dwFlags=0x2) returned 1 [0058.792] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14795_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14795_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14795_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14795_.gif.masked"), dwFlags=0x2) returned 1 [0058.795] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14828_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14828_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14828_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14828_.gif.masked"), dwFlags=0x2) returned 1 [0058.797] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14829_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14829_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14829_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14829_.gif.masked"), dwFlags=0x2) returned 1 [0058.799] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14830_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14830_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14830_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14830_.gif.masked"), dwFlags=0x2) returned 1 [0058.801] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14831_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14831_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14831_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14831_.gif.masked"), dwFlags=0x2) returned 1 [0058.804] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14832_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14832_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14832_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14832_.gif.masked"), dwFlags=0x2) returned 1 [0058.806] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14833_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14833_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14833_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14833_.gif.masked"), dwFlags=0x2) returned 1 [0058.809] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14866_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14866_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14866_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14866_.gif.masked"), dwFlags=0x2) returned 1 [0058.811] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14867_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14867_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14867_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14867_.gif.masked"), dwFlags=0x2) returned 1 [0058.813] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14868_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14868_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14868_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14868_.gif.masked"), dwFlags=0x2) returned 1 [0058.817] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14869_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14869_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14869_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14869_.gif.masked"), dwFlags=0x2) returned 1 [0058.820] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14870_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14870_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14870_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14870_.gif.masked"), dwFlags=0x2) returned 1 [0058.822] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14871_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14871_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14871_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14871_.gif.masked"), dwFlags=0x2) returned 1 [0058.827] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14980_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14980_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14980_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14980_.gif.masked"), dwFlags=0x2) returned 1 [0058.831] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14981_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14981_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14981_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14981_.gif.masked"), dwFlags=0x2) returned 1 [0058.833] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14982_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14982_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14982_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14982_.gif.masked"), dwFlags=0x2) returned 1 [0058.836] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14983_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14983_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14983_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14983_.gif.masked"), dwFlags=0x2) returned 1 [0058.838] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14984_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14984_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14984_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14984_.gif.masked"), dwFlags=0x2) returned 1 [0058.840] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14985_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14985_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14985_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14985_.gif.masked"), dwFlags=0x2) returned 1 [0058.861] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15018_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15018_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15018_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15018_.gif.masked"), dwFlags=0x2) returned 1 [0058.864] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15019_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15019_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15019_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15019_.gif.masked"), dwFlags=0x2) returned 1 [0058.866] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15020_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15020_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15020_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15020_.gif.masked"), dwFlags=0x2) returned 1 [0058.868] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15021_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15021_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15021_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15021_.gif.masked"), dwFlags=0x2) returned 1 [0058.871] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15022_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15022_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15022_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15022_.gif.masked"), dwFlags=0x2) returned 1 [0058.873] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15023_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15023_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15023_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15023_.gif.masked"), dwFlags=0x2) returned 1 [0058.875] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15056_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15056_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15056_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15056_.gif.masked"), dwFlags=0x2) returned 1 [0058.877] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15057_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15057_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15057_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15057_.gif.masked"), dwFlags=0x2) returned 1 [0058.879] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15058_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15058_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15058_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15058_.gif.masked"), dwFlags=0x2) returned 1 [0058.881] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15059_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15059_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15059_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15059_.gif.masked"), dwFlags=0x2) returned 1 [0058.884] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15060_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15060_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15060_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15060_.gif.masked"), dwFlags=0x2) returned 1 [0058.886] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15061_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15061_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15061_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15061_.gif.masked"), dwFlags=0x2) returned 1 [0058.888] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15132_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15132_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15132_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15132_.gif.masked"), dwFlags=0x2) returned 1 [0058.891] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15133_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15133_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15133_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15133_.gif.masked"), dwFlags=0x2) returned 1 [0058.893] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15134_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15134_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15134_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15134_.gif.masked"), dwFlags=0x2) returned 1 [0058.895] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15135_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15135_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15135_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15135_.gif.masked"), dwFlags=0x2) returned 1 [0058.898] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15136_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15136_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15136_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15136_.gif.masked"), dwFlags=0x2) returned 1 [0058.900] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15168_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15168_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15168_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15168_.gif.masked"), dwFlags=0x2) returned 1 [0058.904] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15169_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15169_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15169_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15169_.gif.masked"), dwFlags=0x2) returned 1 [0058.907] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15170_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15170_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15170_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15170_.gif.masked"), dwFlags=0x2) returned 1 [0058.909] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15171_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15171_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15171_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15171_.gif.masked"), dwFlags=0x2) returned 1 [0058.922] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15172_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15172_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15172_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15172_.gif.masked"), dwFlags=0x2) returned 1 [0058.926] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15173_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15173_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15173_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15173_.gif.masked"), dwFlags=0x2) returned 1 [0058.929] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15272_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15272_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15272_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15272_.gif.masked"), dwFlags=0x2) returned 1 [0058.932] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15273_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15273_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15273_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15273_.gif.masked"), dwFlags=0x2) returned 1 [0058.934] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15274_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15274_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15274_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15274_.gif.masked"), dwFlags=0x2) returned 1 [0058.937] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15275_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15275_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15275_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15275_.gif.masked"), dwFlags=0x2) returned 1 [0058.940] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15276_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15276_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15276_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15276_.gif.masked"), dwFlags=0x2) returned 1 [0058.944] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15277_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15277_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15277_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15277_.gif.masked"), dwFlags=0x2) returned 1 [0058.947] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21294_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21294_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21294_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21294_.gif.masked"), dwFlags=0x2) returned 1 [0058.949] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21295_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21295_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21295_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21295_.gif.masked"), dwFlags=0x2) returned 1 [0058.951] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21296_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21296_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21296_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21296_.gif.masked"), dwFlags=0x2) returned 1 [0058.955] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21297_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21297_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21297_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21297_.gif.masked"), dwFlags=0x2) returned 1 [0058.957] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21298_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21298_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21298_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21298_.gif.masked"), dwFlags=0x2) returned 1 [0058.959] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21299_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21299_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21299_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21299_.gif.masked"), dwFlags=0x2) returned 1 [0058.961] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21300_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21300_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21300_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21300_.gif.masked"), dwFlags=0x2) returned 1 [0058.963] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21301_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21301_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21301_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21301_.gif.masked"), dwFlags=0x2) returned 1 [0058.968] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21302_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21302_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21302_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21302_.gif.masked"), dwFlags=0x2) returned 1 [0058.971] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21304_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21304_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21304_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21304_.gif.masked"), dwFlags=0x2) returned 1 [0058.974] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21306_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21306_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21306_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21306_.gif.masked"), dwFlags=0x2) returned 1 [0058.979] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21308_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21308_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21308_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21308_.gif.masked"), dwFlags=0x2) returned 1 [0058.984] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21310_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21310_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21310_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21310_.gif.masked"), dwFlags=0x2) returned 1 [0058.986] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21312_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21312_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21312_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21312_.gif.masked"), dwFlags=0x2) returned 1 [0058.988] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21314_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21314_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21314_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21314_.gif.masked"), dwFlags=0x2) returned 1 [0058.991] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21316_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21316_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21316_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21316_.gif.masked"), dwFlags=0x2) returned 1 [0058.993] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21327_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21327_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21327_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21327_.gif.masked"), dwFlags=0x2) returned 1 [0058.995] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21329_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21329_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21329_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21329_.gif.masked"), dwFlags=0x2) returned 1 [0059.001] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21331_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21331_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21331_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21331_.gif.masked"), dwFlags=0x2) returned 1 [0059.003] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21333_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21333_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21333_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21333_.gif.masked"), dwFlags=0x2) returned 1 [0059.007] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21335_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21335_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21335_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21335_.gif.masked"), dwFlags=0x2) returned 1 [0059.010] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21337_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21337_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21337_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21337_.gif.masked"), dwFlags=0x2) returned 1 [0059.012] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21339_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21339_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21339_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21339_.gif.masked"), dwFlags=0x2) returned 1 [0059.014] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21342_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21342_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21342_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21342_.gif.masked"), dwFlags=0x2) returned 1 [0059.016] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21343_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21343_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21343_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21343_.gif.masked"), dwFlags=0x2) returned 1 [0059.019] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21344_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21344_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21344_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21344_.gif.masked"), dwFlags=0x2) returned 1 [0059.021] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21364_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21364_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21364_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21364_.gif.masked"), dwFlags=0x2) returned 1 [0059.023] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21365_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21365_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21365_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21365_.gif.masked"), dwFlags=0x2) returned 1 [0059.028] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21366_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21366_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21366_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21366_.gif.masked"), dwFlags=0x2) returned 1 [0059.032] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21375_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21375_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21375_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21375_.gif.masked"), dwFlags=0x2) returned 1 [0059.034] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21376_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21376_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21376_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21376_.gif.masked"), dwFlags=0x2) returned 1 [0059.037] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21377_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21377_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21377_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21377_.gif.masked"), dwFlags=0x2) returned 1 [0059.040] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21398_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21398_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21398_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21398_.gif.masked"), dwFlags=0x2) returned 1 [0059.043] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21399_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21399_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21399_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21399_.gif.masked"), dwFlags=0x2) returned 1 [0059.046] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21400_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21400_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21400_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21400_.gif.masked"), dwFlags=0x2) returned 1 [0059.049] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21421_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21421_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21421_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21421_.gif.masked"), dwFlags=0x2) returned 1 [0059.052] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21422_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21422_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21422_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21422_.gif.masked"), dwFlags=0x2) returned 1 [0059.055] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21423_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21423_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21423_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21423_.gif.masked"), dwFlags=0x2) returned 1 [0059.057] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21433_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21433_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21433_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21433_.gif.masked"), dwFlags=0x2) returned 1 [0059.060] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21434_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21434_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21434_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21434_.gif.masked"), dwFlags=0x2) returned 1 [0059.063] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21435_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21435_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21435_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21435_.gif.masked"), dwFlags=0x2) returned 1 [0059.066] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21480_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21480_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21480_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21480_.gif.masked"), dwFlags=0x2) returned 1 [0059.069] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21481_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21481_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21481_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21481_.gif.masked"), dwFlags=0x2) returned 1 [0059.072] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21482_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21482_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21482_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21482_.gif.masked"), dwFlags=0x2) returned 1 [0059.075] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21503_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21503_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21503_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21503_.gif.masked"), dwFlags=0x2) returned 1 [0059.077] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21504_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21504_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21504_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21504_.gif.masked"), dwFlags=0x2) returned 1 [0059.081] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21505_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21505_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21505_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21505_.gif.masked"), dwFlags=0x2) returned 1 [0059.083] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21518_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21518_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21518_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21518_.gif.masked"), dwFlags=0x2) returned 1 [0059.086] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21519_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21519_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21519_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21519_.gif.masked"), dwFlags=0x2) returned 1 [0059.089] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21520_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21520_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21520_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21520_.gif.masked"), dwFlags=0x2) returned 1 [0059.093] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21533_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21533_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21533_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21533_.gif.masked"), dwFlags=0x2) returned 1 [0059.096] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21534_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21534_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21534_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21534_.gif.masked"), dwFlags=0x2) returned 1 [0059.098] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21535_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21535_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21535_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21535_.gif.masked"), dwFlags=0x2) returned 1 [0059.103] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115834.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115834.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115834.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115834.gif.masked"), dwFlags=0x2) returned 1 [0059.106] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115835.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115835.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115835.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115835.gif.masked"), dwFlags=0x2) returned 1 [0059.108] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115836.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115836.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115836.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115836.gif.masked"), dwFlags=0x2) returned 1 [0059.110] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115839.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115839.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115839.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115839.gif.masked"), dwFlags=0x2) returned 1 [0059.112] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115840.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115840.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115840.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115840.gif.masked"), dwFlags=0x2) returned 1 [0059.115] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115841.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115841.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115841.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115841.gif.masked"), dwFlags=0x2) returned 1 [0059.120] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115842.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115842.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115842.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115842.gif.masked"), dwFlags=0x2) returned 1 [0059.122] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115843.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115843.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115843.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115843.gif.masked"), dwFlags=0x2) returned 1 [0059.124] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115844.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115844.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115844.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115844.gif.masked"), dwFlags=0x2) returned 1 [0059.127] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115863.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115863.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115863.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115863.gif.masked"), dwFlags=0x2) returned 1 [0059.129] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115864.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115864.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115864.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115864.gif.masked"), dwFlags=0x2) returned 1 [0059.131] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115865.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115865.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115865.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115865.gif.masked"), dwFlags=0x2) returned 1 [0059.134] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115866.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115866.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115866.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115866.gif.masked"), dwFlags=0x2) returned 1 [0059.136] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115867.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115867.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115867.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115867.gif.masked"), dwFlags=0x2) returned 1 [0059.138] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115868.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115868.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115868.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115868.gif.masked"), dwFlags=0x2) returned 1 [0059.143] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5178e0b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x76e487e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x76e487e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x6c, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0059.147] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10219_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd10219_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10219_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd10219_.gif.masked"), dwFlags=0x2) returned 1 [0059.151] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10256_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd10256_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10256_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd10256_.gif.masked"), dwFlags=0x2) returned 1 [0059.155] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10289_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd10289_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10289_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd10289_.gif.masked"), dwFlags=0x2) returned 1 [0059.157] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10290_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd10290_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10290_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd10290_.gif.masked"), dwFlags=0x2) returned 1 [0059.162] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10307_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd10307_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10307_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd10307_.gif.masked"), dwFlags=0x2) returned 1 [0059.165] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10308_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd10308_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10308_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd10308_.gif.masked"), dwFlags=0x2) returned 1 [0059.169] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10358_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd10358_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10358_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd10358_.gif.masked"), dwFlags=0x2) returned 1 [0059.171] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14516_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14516_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14516_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14516_.gif.masked"), dwFlags=0x2) returned 1 [0059.175] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14538_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14538_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14538_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14538_.gif.masked"), dwFlags=0x2) returned 1 [0059.180] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14539_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14539_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14539_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14539_.gif.masked"), dwFlags=0x2) returned 1 [0059.183] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14594_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14594_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14594_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14594_.gif.masked"), dwFlags=0x2) returned 1 [0059.186] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14595_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14595_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14595_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14595_.gif.masked"), dwFlags=0x2) returned 1 [0059.188] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14677_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14677_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14677_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14677_.gif.masked"), dwFlags=0x2) returned 1 [0059.191] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14710_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14710_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14710_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14710_.gif.masked"), dwFlags=0x2) returned 1 [0059.197] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14711_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14711_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14711_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14711_.gif.masked"), dwFlags=0x2) returned 1 [0059.199] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14768_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14768_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14768_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14768_.gif.masked"), dwFlags=0x2) returned 1 [0059.202] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14769_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14769_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14769_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14769_.gif.masked"), dwFlags=0x2) returned 1 [0059.205] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14800_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14800_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14800_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14800_.gif.masked"), dwFlags=0x2) returned 1 [0059.210] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14801_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14801_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14801_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14801_.gif.masked"), dwFlags=0x2) returned 1 [0059.212] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14844_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14844_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14844_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14844_.gif.masked"), dwFlags=0x2) returned 1 [0059.214] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14845_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14845_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14845_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14845_.gif.masked"), dwFlags=0x2) returned 1 [0059.216] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14882_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14882_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14882_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14882_.gif.masked"), dwFlags=0x2) returned 1 [0059.219] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14883_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14883_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14883_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14883_.gif.masked"), dwFlags=0x2) returned 1 [0059.224] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14996_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14996_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14996_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14996_.gif.masked"), dwFlags=0x2) returned 1 [0059.227] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14997_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14997_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14997_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14997_.gif.masked"), dwFlags=0x2) returned 1 [0059.232] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15034_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15034_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15034_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15034_.gif.masked"), dwFlags=0x2) returned 1 [0059.235] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15035_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15035_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15035_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15035_.gif.masked"), dwFlags=0x2) returned 1 [0059.240] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15072_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15072_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15072_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15072_.gif.masked"), dwFlags=0x2) returned 1 [0059.243] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15073_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15073_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15073_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15073_.gif.masked"), dwFlags=0x2) returned 1 [0059.246] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15155_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15155_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15155_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15155_.gif.masked"), dwFlags=0x2) returned 1 [0059.249] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15156_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15156_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15156_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15156_.gif.masked"), dwFlags=0x2) returned 1 [0059.253] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15184_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15184_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15184_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15184_.gif.masked"), dwFlags=0x2) returned 1 [0059.257] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15185_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15185_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15185_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15185_.gif.masked"), dwFlags=0x2) returned 1 [0059.261] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15301_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15301_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15301_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15301_.gif.masked"), dwFlags=0x2) returned 1 [0059.263] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15302_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15302_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15302_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15302_.gif.masked"), dwFlags=0x2) returned 1 [0059.269] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21303_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21303_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21303_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21303_.gif.masked"), dwFlags=0x2) returned 1 [0059.274] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21305_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21305_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21305_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21305_.gif.masked"), dwFlags=0x2) returned 1 [0059.277] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21307_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21307_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21307_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21307_.gif.masked"), dwFlags=0x2) returned 1 [0059.284] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21309_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21309_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21309_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21309_.gif.masked"), dwFlags=0x2) returned 1 [0059.292] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21311_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21311_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21311_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21311_.gif.masked"), dwFlags=0x2) returned 1 [0059.314] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21313_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21313_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21313_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21313_.gif.masked"), dwFlags=0x2) returned 1 [0059.318] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21315_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21315_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21315_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21315_.gif.masked"), dwFlags=0x2) returned 1 [0059.321] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21318_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21318_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21318_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21318_.gif.masked"), dwFlags=0x2) returned 1 [0059.325] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21319_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21319_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21319_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21319_.gif.masked"), dwFlags=0x2) returned 1 [0059.331] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21320_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21320_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21320_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21320_.gif.masked"), dwFlags=0x2) returned 1 [0059.337] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21321_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21321_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21321_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21321_.gif.masked"), dwFlags=0x2) returned 1 [0059.342] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21322_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21322_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21322_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21322_.gif.masked"), dwFlags=0x2) returned 1 [0059.347] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21323_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21323_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21323_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21323_.gif.masked"), dwFlags=0x2) returned 1 [0059.355] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21324_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21324_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21324_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21324_.gif.masked"), dwFlags=0x2) returned 1 [0059.361] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21325_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21325_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21325_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21325_.gif.masked"), dwFlags=0x2) returned 1 [0059.367] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21326_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21326_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21326_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21326_.gif.masked"), dwFlags=0x2) returned 1 [0059.371] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21328_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21328_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21328_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21328_.gif.masked"), dwFlags=0x2) returned 1 [0059.377] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21330_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21330_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21330_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21330_.gif.masked"), dwFlags=0x2) returned 1 [0059.393] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21332_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21332_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21332_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21332_.gif.masked"), dwFlags=0x2) returned 1 [0059.400] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21334_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21334_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21334_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21334_.gif.masked"), dwFlags=0x2) returned 1 [0059.409] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21336_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21336_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21336_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21336_.gif.masked"), dwFlags=0x2) returned 1 [0059.413] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21338_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21338_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21338_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21338_.gif.masked"), dwFlags=0x2) returned 1 [0059.416] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21340_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21340_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21340_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21340_.gif.masked"), dwFlags=0x2) returned 1 [0059.421] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21348_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21348_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21348_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21348_.gif.masked"), dwFlags=0x2) returned 1 [0059.428] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21370_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21370_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21370_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21370_.gif.masked"), dwFlags=0x2) returned 1 [0059.432] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21390_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21390_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21390_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21390_.gif.masked"), dwFlags=0x2) returned 1 [0059.436] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21413_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21413_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21413_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21413_.gif.masked"), dwFlags=0x2) returned 1 [0059.443] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21427_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21427_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21427_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21427_.gif.masked"), dwFlags=0x2) returned 1 [0059.446] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21448_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21448_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21448_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21448_.gif.masked"), dwFlags=0x2) returned 1 [0059.450] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21495_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21495_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21495_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21495_.gif.masked"), dwFlags=0x2) returned 1 [0059.455] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21512_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21512_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21512_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21512_.gif.masked"), dwFlags=0x2) returned 1 [0059.459] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21527_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21527_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21527_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21527_.gif.masked"), dwFlags=0x2) returned 1 [0059.466] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21548_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21548_.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21548_.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21548_.gif.masked"), dwFlags=0x2) returned 1 [0059.469] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\J0115855.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\j0115855.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\J0115855.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\j0115855.gif.masked"), dwFlags=0x2) returned 1 [0059.472] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\J0115856.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\j0115856.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\J0115856.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\j0115856.gif.masked"), dwFlags=0x2) returned 1 [0059.475] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\J0115875.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\j0115875.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\J0115875.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\j0115875.gif.masked"), dwFlags=0x2) returned 1 [0059.482] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\J0115876.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\j0115876.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\J0115876.GIF.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\j0115876.gif.masked"), dwFlags=0x2) returned 1 [0060.033] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\OFFICE10.MMW" (normalized: "c:\\program files\\microsoft office\\media\\office14\\office10.mmw"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\OFFICE10.MMW.masked" (normalized: "c:\\program files\\microsoft office\\media\\office14\\office10.mmw.masked"), dwFlags=0x2) returned 1 [0060.037] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x776c3640, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x776c3640, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555ce0 [0060.043] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x776c3640, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x776c3640, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x59, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0060.049] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\Bibliography\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e1bb530, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x776e97a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x776e97a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x59, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0060.147] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\Bibliography\\BIBFORM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\bibliography\\bibform.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\Bibliography\\BIBFORM.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\bibliography\\bibform.xml.masked"), dwFlags=0x2) returned 1 [0060.155] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\BW.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\bw.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\BW.CSS.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\bw.css.masked"), dwFlags=0x2) returned 1 [0060.163] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\COFFEE.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\coffee.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\COFFEE.CSS.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\coffee.css.masked"), dwFlags=0x2) returned 1 [0060.172] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\CT_ROOTS.XML" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ct_roots.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\CT_ROOTS.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ct_roots.xml.masked"), dwFlags=0x2) returned 1 [0060.189] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecec290, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x77840400, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x77840400, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x59, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0060.191] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices\\+Connect to New Data Source.odc" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dataservices\\+connect to new data source.odc"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices\\+Connect to New Data Source.odc.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dataservices\\+connect to new data source.odc.masked"), dwFlags=0x2) returned 1 [0060.194] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices\\+NewSQLServerConnection.odc" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dataservices\\+newsqlserverconnection.odc"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices\\+NewSQLServerConnection.odc.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dataservices\\+newsqlserverconnection.odc.masked"), dwFlags=0x2) returned 1 [0060.821] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\DBSAMPLE.MDB" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dbsample.mdb"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\DBSAMPLE.MDB.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dbsample.mdb.masked"), dwFlags=0x2) returned 1 [0060.835] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\DEFAULT.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\default.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\DEFAULT.CSS.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\default.css.masked"), dwFlags=0x2) returned 1 [0060.949] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\EXPTOOWS.XLA" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\exptoows.xla"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\EXPTOOWS.XLA.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\exptoows.xla.masked"), dwFlags=0x2) returned 1 [0060.956] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\FOREST.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\forest.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\FOREST.CSS.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\forest.css.masked"), dwFlags=0x2) returned 1 [0060.963] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GANTT.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\gantt.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GANTT.CSS.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\gantt.css.masked"), dwFlags=0x2) returned 1 [0060.969] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd3f79f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x77fb08c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x77fb08c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x59, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0061.000] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\BG_ADOBE.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_adobe.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\BG_ADOBE.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_adobe.gif.masked"), dwFlags=0x2) returned 1 [0061.010] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Casual.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_casual.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Casual.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_casual.gif.masked"), dwFlags=0x2) returned 1 [0061.049] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Country.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_country.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Country.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_country.gif.masked"), dwFlags=0x2) returned 1 [0061.059] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Earthy.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_earthy.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Earthy.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_earthy.gif.masked"), dwFlags=0x2) returned 1 [0061.084] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_GreenTea.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_greentea.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_GreenTea.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_greentea.gif.masked"), dwFlags=0x2) returned 1 [0061.087] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Groove.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_groove.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Groove.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_groove.gif.masked"), dwFlags=0x2) returned 1 [0061.100] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_LightSpirit.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_lightspirit.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_LightSpirit.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_lightspirit.gif.masked"), dwFlags=0x2) returned 1 [0061.118] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_OliveGreen.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_olivegreen.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_OliveGreen.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_olivegreen.gif.masked"), dwFlags=0x2) returned 1 [0061.129] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Premium.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_premium.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Premium.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_premium.gif.masked"), dwFlags=0x2) returned 1 [0061.160] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_SlateBlue.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_slateblue.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_SlateBlue.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_slateblue.gif.masked"), dwFlags=0x2) returned 1 [0061.171] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_TexturedBlue.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_texturedblue.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_TexturedBlue.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_texturedblue.gif.masked"), dwFlags=0x2) returned 1 [0061.195] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_VelvetRose.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_velvetrose.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_VelvetRose.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_velvetrose.gif.masked"), dwFlags=0x2) returned 1 [0061.201] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd3f79f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x781ebd60, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x781ebd60, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x59, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0061.206] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Adobe.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\adobe.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Adobe.css.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\adobe.css.masked"), dwFlags=0x2) returned 1 [0061.211] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd4b60d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x781ebd60, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x781ebd60, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x10, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0061.213] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\americana\\tab_off.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana\\TAB_OFF.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\americana\\tab_off.gif.masked"), dwFlags=0x2) returned 1 [0061.216] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\americana\\tab_on.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana\\TAB_ON.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\americana\\tab_on.gif.masked"), dwFlags=0x2) returned 1 [0061.221] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\americana.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana.css.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\americana.css.masked"), dwFlags=0x2) returned 1 [0061.229] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd48ff70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x78211ec0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x78211ec0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x10, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0061.231] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\BUTTON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\babyblue\\button.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\BUTTON.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\babyblue\\button.gif.masked"), dwFlags=0x2) returned 1 [0061.235] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\babyblue\\header.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\HEADER.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\babyblue\\header.gif.masked"), dwFlags=0x2) returned 1 [0061.237] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\babyblue\\tab_off.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\TAB_OFF.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\babyblue\\tab_off.gif.masked"), dwFlags=0x2) returned 1 [0061.240] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\babyblue\\tab_on.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\TAB_ON.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\babyblue\\tab_on.gif.masked"), dwFlags=0x2) returned 1 [0061.246] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\babyblue.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue.css.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\babyblue.css.masked"), dwFlags=0x2) returned 1 [0061.251] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Beige.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\beige.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Beige.css.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\beige.css.masked"), dwFlags=0x2) returned 1 [0061.256] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd4b60d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x7825e180, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x7825e180, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x10, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0061.258] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\biscay\\tab_off.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay\\TAB_OFF.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\biscay\\tab_off.gif.masked"), dwFlags=0x2) returned 1 [0061.260] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\biscay\\tab_on.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay\\TAB_ON.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\biscay\\tab_on.gif.masked"), dwFlags=0x2) returned 1 [0061.267] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\biscay.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay.css.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\biscay.css.masked"), dwFlags=0x2) returned 1 [0061.272] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd4dc230, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x782842e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x782842e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x10, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0061.275] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightorange\\background.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\background.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightorange\\background.gif.masked"), dwFlags=0x2) returned 1 [0061.277] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\BUTTON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightorange\\button.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\BUTTON.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightorange\\button.gif.masked"), dwFlags=0x2) returned 1 [0061.279] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightorange\\tab_off.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\TAB_OFF.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightorange\\tab_off.gif.masked"), dwFlags=0x2) returned 1 [0061.282] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightorange\\tab_on.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\TAB_ON.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightorange\\tab_on.gif.masked"), dwFlags=0x2) returned 1 [0061.289] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightorange.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange.css.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightorange.css.masked"), dwFlags=0x2) returned 1 [0061.301] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd502390, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x782d05a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x782d05a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x10, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0061.303] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightyellow\\header.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\HEADER.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightyellow\\header.gif.masked"), dwFlags=0x2) returned 1 [0061.306] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightyellow\\tab_off.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\TAB_OFF.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightyellow\\tab_off.gif.masked"), dwFlags=0x2) returned 1 [0061.309] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightyellow\\tab_on.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\TAB_ON.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightyellow\\tab_on.gif.masked"), dwFlags=0x2) returned 1 [0061.315] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightyellow.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow.css.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightyellow.css.masked"), dwFlags=0x2) returned 1 [0061.320] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Casual.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\casual.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Casual.css.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\casual.css.masked"), dwFlags=0x2) returned 1 [0061.325] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd5284f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x7831c860, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x7831c860, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x10, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0061.327] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\desert\\header.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\HEADER.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\desert\\header.gif.masked"), dwFlags=0x2) returned 1 [0061.330] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\desert\\tab_off.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\TAB_OFF.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\desert\\tab_off.gif.masked"), dwFlags=0x2) returned 1 [0061.334] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\desert\\tab_on.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\TAB_ON.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\desert\\tab_on.gif.masked"), dwFlags=0x2) returned 1 [0061.340] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\desert.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert.css.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\desert.css.masked"), dwFlags=0x2) returned 1 [0061.343] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Discussion.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\discussion.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Discussion.css.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\discussion.css.masked"), dwFlags=0x2) returned 1 [0061.347] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Earthy.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\earthy.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Earthy.css.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\earthy.css.masked"), dwFlags=0x2) returned 1 [0061.352] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd5284f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x783429c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x783429c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x10, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0061.355] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\graycheck\\header.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\HEADER.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\graycheck\\header.gif.masked"), dwFlags=0x2) returned 1 [0061.358] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\graycheck\\tab_off.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\TAB_OFF.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\graycheck\\tab_off.gif.masked"), dwFlags=0x2) returned 1 [0061.361] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\graycheck\\tab_on.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\TAB_ON.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\graycheck\\tab_on.gif.masked"), dwFlags=0x2) returned 1 [0061.369] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\graycheck.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck.css.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\graycheck.css.masked"), dwFlags=0x2) returned 1 [0061.376] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GreenTea.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\greentea.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GreenTea.css.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\greentea.css.masked"), dwFlags=0x2) returned 1 [0061.382] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\LightSpirit.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\lightspirit.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\LightSpirit.css.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\lightspirit.css.masked"), dwFlags=0x2) returned 1 [0061.388] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd5284f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x783b4de0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x783b4de0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0061.391] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\lime\\tab_off.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime\\TAB_OFF.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\lime\\tab_off.gif.masked"), dwFlags=0x2) returned 1 [0061.396] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\lime\\tab_on.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime\\TAB_ON.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\lime\\tab_on.gif.masked"), dwFlags=0x2) returned 1 [0061.403] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\lime.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime.css.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\lime.css.masked"), dwFlags=0x2) returned 1 [0061.407] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Maroon.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\maroon.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Maroon.css.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\maroon.css.masked"), dwFlags=0x2) returned 1 [0061.412] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd5284f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x783daf40, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x783daf40, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0061.416] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\oasis\\header.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\HEADER.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\oasis\\header.gif.masked"), dwFlags=0x2) returned 1 [0061.419] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\oasis\\tab_off.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\TAB_OFF.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\oasis\\tab_off.gif.masked"), dwFlags=0x2) returned 1 [0061.422] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\oasis\\tab_on.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\TAB_ON.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\oasis\\tab_on.gif.masked"), dwFlags=0x2) returned 1 [0061.428] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\oasis.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis.css.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\oasis.css.masked"), dwFlags=0x2) returned 1 [0061.433] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\OliveGreen.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\olivegreen.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\OliveGreen.css.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\olivegreen.css.masked"), dwFlags=0x2) returned 1 [0061.439] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Premium.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\premium.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Premium.css.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\premium.css.masked"), dwFlags=0x2) returned 1 [0061.443] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\RTF_BOLD.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\rtf_bold.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\RTF_BOLD.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\rtf_bold.gif.masked"), dwFlags=0x2) returned 1 [0061.446] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\rtf_choosefont.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\rtf_choosefont.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\rtf_choosefont.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\rtf_choosefont.gif.masked"), dwFlags=0x2) returned 1 [0061.450] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\rtf_italic.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\rtf_italic.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\rtf_italic.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\rtf_italic.gif.masked"), dwFlags=0x2) returned 1 [0061.452] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\rtf_spellcheck.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\rtf_spellcheck.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\rtf_spellcheck.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\rtf_spellcheck.gif.masked"), dwFlags=0x2) returned 1 [0061.456] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\rtf_underline.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\rtf_underline.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\rtf_underline.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\rtf_underline.gif.masked"), dwFlags=0x2) returned 1 [0061.461] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd54e650, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x7844d360, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x7844d360, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0061.463] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\slate\\tab_off.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate\\TAB_OFF.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\slate\\tab_off.gif.masked"), dwFlags=0x2) returned 1 [0061.466] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\slate\\tab_on.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate\\TAB_ON.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\slate\\tab_on.gif.masked"), dwFlags=0x2) returned 1 [0061.473] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\slate.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate.css.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\slate.css.masked"), dwFlags=0x2) returned 1 [0061.477] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SlateBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\slateblue.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SlateBlue.css.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\slateblue.css.masked"), dwFlags=0x2) returned 1 [0061.482] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd54e650, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x78499620, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x78499620, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x10, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0061.491] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\softblue\\background.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\background.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\softblue\\background.gif.masked"), dwFlags=0x2) returned 1 [0061.504] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\softblue\\tab_off.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\TAB_OFF.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\softblue\\tab_off.gif.masked"), dwFlags=0x2) returned 1 [0061.507] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\softblue\\tab_on.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\TAB_ON.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\softblue\\tab_on.gif.masked"), dwFlags=0x2) returned 1 [0061.515] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\softblue.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue.css.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\softblue.css.masked"), dwFlags=0x2) returned 1 [0061.521] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd67f150, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x784e58e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x784e58e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x10, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0061.522] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\arrow.png" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\arrow.png"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\arrow.png.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\arrow.png.masked"), dwFlags=0x2) returned 1 [0061.528] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Document.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\document.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Document.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\document.gif.masked"), dwFlags=0x2) returned 1 [0061.532] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Generic.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\generic.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Generic.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\generic.gif.masked"), dwFlags=0x2) returned 1 [0061.535] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\gradient.png" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\gradient.png"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\gradient.png.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\gradient.png.masked"), dwFlags=0x2) returned 1 [0061.539] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Main.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\main.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Main.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\main.gif.masked"), dwFlags=0x2) returned 1 [0061.544] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Person.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\person.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Person.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\person.gif.masked"), dwFlags=0x2) returned 1 [0061.549] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Response.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\response.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Response.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\response.gif.masked"), dwFlags=0x2) returned 1 [0061.559] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions.css.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions.css.masked"), dwFlags=0x2) returned 1 [0061.562] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Doc.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions_doc.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Doc.css.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions_doc.css.masked"), dwFlags=0x2) returned 1 [0061.569] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Generic.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions_generic.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Generic.css.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions_generic.css.masked"), dwFlags=0x2) returned 1 [0061.571] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Person.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions_person.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Person.css.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions_person.css.masked"), dwFlags=0x2) returned 1 [0061.573] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Response.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions_response.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Response.css.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions_response.css.masked"), dwFlags=0x2) returned 1 [0061.581] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd54e650, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x7857de60, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x7857de60, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x10, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0061.584] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\BUTTON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\springgreen\\button.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\BUTTON.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\springgreen\\button.gif.masked"), dwFlags=0x2) returned 1 [0061.587] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\springgreen\\tab_off.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\TAB_OFF.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\springgreen\\tab_off.gif.masked"), dwFlags=0x2) returned 1 [0061.591] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\springgreen\\tab_on.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\TAB_ON.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\springgreen\\tab_on.gif.masked"), dwFlags=0x2) returned 1 [0061.598] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\springgreen.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen.css.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\springgreen.css.masked"), dwFlags=0x2) returned 1 [0061.603] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Sts.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Sts.css.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts.css.masked"), dwFlags=0x2) returned 1 [0061.608] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd54e650, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x785ca120, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x785ca120, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0061.610] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts2\\background.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\background.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts2\\background.gif.masked"), dwFlags=0x2) returned 1 [0061.617] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts2\\header.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\HEADER.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts2\\header.gif.masked"), dwFlags=0x2) returned 1 [0061.620] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts2\\tab_off.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\TAB_OFF.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts2\\tab_off.gif.masked"), dwFlags=0x2) returned 1 [0061.623] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts2\\tab_on.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\TAB_ON.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts2\\tab_on.gif.masked"), dwFlags=0x2) returned 1 [0061.629] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Sts2.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts2.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Sts2.css.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts2.css.masked"), dwFlags=0x2) returned 1 [0061.637] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd54e650, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x786163e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x786163e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0061.640] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\swirl\\background.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\background.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\swirl\\background.gif.masked"), dwFlags=0x2) returned 1 [0061.670] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\swirl\\header.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\HEADER.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\swirl\\header.gif.masked"), dwFlags=0x2) returned 1 [0061.673] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\swirl\\tab_off.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\TAB_OFF.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\swirl\\tab_off.gif.masked"), dwFlags=0x2) returned 1 [0061.676] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\swirl\\tab_on.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\TAB_ON.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\swirl\\tab_on.gif.masked"), dwFlags=0x2) returned 1 [0061.682] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\swirl.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl.css.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\swirl.css.masked"), dwFlags=0x2) returned 1 [0061.687] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Teal.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\teal.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Teal.css.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\teal.css.masked"), dwFlags=0x2) returned 1 [0061.692] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\TexturedBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\texturedblue.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\TexturedBlue.css.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\texturedblue.css.masked"), dwFlags=0x2) returned 1 [0061.699] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\VelvetRose.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\velvetrose.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\VelvetRose.css.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\velvetrose.css.masked"), dwFlags=0x2) returned 1 [0061.716] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\Invite or Link.one" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\invite or link.one"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\Invite or Link.one.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\invite or link.one.masked"), dwFlags=0x2) returned 1 [0061.723] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\JADE.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\jade.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\JADE.CSS.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\jade.css.masked"), dwFlags=0x2) returned 1 [0061.733] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\network.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK.CSS.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\network.css.masked"), dwFlags=0x2) returned 1 [0061.738] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\OCCMPVRD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\occmpvrd.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\OCCMPVRD.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\occmpvrd.xml.masked"), dwFlags=0x2) returned 1 [0061.743] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\OCMODVRD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ocmodvrd.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\OCMODVRD.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ocmodvrd.xml.masked"), dwFlags=0x2) returned 1 [0061.844] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\OUTFORM.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outform.dat"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\OUTFORM.DAT.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outform.dat.masked"), dwFlags=0x2) returned 1 [0061.852] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.H" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlperf.h"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.H.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlperf.h.masked"), dwFlags=0x2) returned 1 [0061.858] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PASSPORT.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\passport.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PASSPORT.CSS.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\passport.css.masked"), dwFlags=0x2) returned 1 [0061.865] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PASTEL.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pastel.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PASTEL.CSS.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pastel.css.masked"), dwFlags=0x2) returned 1 [0061.872] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PRIMARY.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\primary.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PRIMARY.CSS.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\primary.css.masked"), dwFlags=0x2) returned 1 [0061.896] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.DOC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\prottpln.doc"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.DOC.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\prottpln.doc.masked"), dwFlags=0x2) returned 1 [0061.912] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.PPT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\prottpln.ppt"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.PPT.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\prottpln.ppt.masked"), dwFlags=0x2) returned 1 [0061.924] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.XLS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\prottpln.xls"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.XLS.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\prottpln.xls.masked"), dwFlags=0x2) returned 1 [0061.947] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.DOC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\prottplv.doc"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.DOC.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\prottplv.doc.masked"), dwFlags=0x2) returned 1 [0061.964] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.PPT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\prottplv.ppt"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.PPT.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\prottplv.ppt.masked"), dwFlags=0x2) returned 1 [0061.976] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.XLS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\prottplv.xls"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.XLS.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\prottplv.xls.masked"), dwFlags=0x2) returned 1 [0062.425] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHKEY.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\psrchkey.dat"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHKEY.DAT.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\psrchkey.dat.masked"), dwFlags=0x2) returned 1 [0063.940] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLEX.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\psrchlex.dat"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLEX.DAT.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\psrchlex.dat.masked"), dwFlags=0x2) returned 1 [0063.998] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLTS.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\psrchlts.dat"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLTS.DAT.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\psrchlts.dat.masked"), dwFlags=0x2) returned 1 [0064.005] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHPHN.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\psrchphn.dat"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHPHN.DAT.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\psrchphn.dat.masked"), dwFlags=0x2) returned 1 [0064.702] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHSRN.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\psrchsrn.dat"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHSRN.DAT.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\psrchsrn.dat.masked"), dwFlags=0x2) returned 1 [0064.711] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ba28770, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7a3652c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x7a3652c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0064.871] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME01.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme01.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME01.CSS.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme01.css.masked"), dwFlags=0x2) returned 1 [0065.038] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME02.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme02.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME02.CSS.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme02.css.masked"), dwFlags=0x2) returned 1 [0065.201] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME03.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme03.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME03.CSS.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme03.css.masked"), dwFlags=0x2) returned 1 [0065.373] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME04.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme04.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME04.CSS.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme04.css.masked"), dwFlags=0x2) returned 1 [0065.528] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME05.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme05.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME05.CSS.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme05.css.masked"), dwFlags=0x2) returned 1 [0065.718] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME06.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme06.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME06.CSS.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme06.css.masked"), dwFlags=0x2) returned 1 [0065.881] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME07.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme07.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME07.CSS.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme07.css.masked"), dwFlags=0x2) returned 1 [0066.055] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME08.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme08.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME08.CSS.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme08.css.masked"), dwFlags=0x2) returned 1 [0066.226] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME09.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme09.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME09.CSS.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme09.css.masked"), dwFlags=0x2) returned 1 [0066.399] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME10.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme10.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME10.CSS.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme10.css.masked"), dwFlags=0x2) returned 1 [0066.789] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME11.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme11.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME11.CSS.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme11.css.masked"), dwFlags=0x2) returned 1 [0066.944] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME12.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme12.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME12.CSS.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme12.css.masked"), dwFlags=0x2) returned 1 [0067.102] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME13.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme13.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME13.CSS.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme13.css.masked"), dwFlags=0x2) returned 1 [0067.416] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME14.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme14.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME14.CSS.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme14.css.masked"), dwFlags=0x2) returned 1 [0067.791] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME15.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme15.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME15.CSS.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme15.css.masked"), dwFlags=0x2) returned 1 [0067.922] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME16.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme16.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME16.CSS.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme16.css.masked"), dwFlags=0x2) returned 1 [0068.050] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME17.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme17.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME17.CSS.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme17.css.masked"), dwFlags=0x2) returned 1 [0068.185] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME18.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme18.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME18.CSS.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme18.css.masked"), dwFlags=0x2) returned 1 [0068.334] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME19.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme19.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME19.CSS.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme19.css.masked"), dwFlags=0x2) returned 1 [0068.535] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME20.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme20.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME20.CSS.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme20.css.masked"), dwFlags=0x2) returned 1 [0068.922] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME21.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme21.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME21.CSS.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme21.css.masked"), dwFlags=0x2) returned 1 [0069.160] GetLastError () returned 0x0 [0069.160] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bbf0 | out: lpNewFilePointer=0x0) returned 1 [0069.160] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bb84 | out: lpNewFilePointer=0x0) returned 1 [0069.161] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x18f40, lpNewFilePointer=0x0, dwMoveMethod=0x38bc00 | out: lpNewFilePointer=0x0) returned 1 [0069.161] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bbb4 | out: lpNewFilePointer=0x0) returned 1 [0069.161] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.162] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bc64 | out: lpNewFilePointer=0x0) returned 1 [0069.162] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bbf8 | out: lpNewFilePointer=0x0) returned 1 [0069.162] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x18f40, lpNewFilePointer=0x0, dwMoveMethod=0x38bc74 | out: lpNewFilePointer=0x0) returned 1 [0069.162] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bc28 | out: lpNewFilePointer=0x0) returned 1 [0069.162] GetLastError () returned 0x0 [0069.163] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bbf0 | out: lpNewFilePointer=0x0) returned 1 [0069.163] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bb84 | out: lpNewFilePointer=0x0) returned 1 [0069.163] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x18f48, lpNewFilePointer=0x0, dwMoveMethod=0x38bc00 | out: lpNewFilePointer=0x0) returned 1 [0069.163] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bbb4 | out: lpNewFilePointer=0x0) returned 1 [0069.164] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.164] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bc64 | out: lpNewFilePointer=0x0) returned 1 [0069.165] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bbf8 | out: lpNewFilePointer=0x0) returned 1 [0069.165] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x18f48, lpNewFilePointer=0x0, dwMoveMethod=0x38bc74 | out: lpNewFilePointer=0x0) returned 1 [0069.165] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bc28 | out: lpNewFilePointer=0x0) returned 1 [0069.165] GetLastError () returned 0x0 [0069.166] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bbf0 | out: lpNewFilePointer=0x0) returned 1 [0069.166] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bb84 | out: lpNewFilePointer=0x0) returned 1 [0069.166] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x18f50, lpNewFilePointer=0x0, dwMoveMethod=0x38bc00 | out: lpNewFilePointer=0x0) returned 1 [0069.167] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bbb4 | out: lpNewFilePointer=0x0) returned 1 [0069.167] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.167] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bc64 | out: lpNewFilePointer=0x0) returned 1 [0069.168] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bbf8 | out: lpNewFilePointer=0x0) returned 1 [0069.168] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x18f50, lpNewFilePointer=0x0, dwMoveMethod=0x38bc74 | out: lpNewFilePointer=0x0) returned 1 [0069.168] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bc28 | out: lpNewFilePointer=0x0) returned 1 [0069.168] GetLastError () returned 0x0 [0069.169] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bbf0 | out: lpNewFilePointer=0x0) returned 1 [0069.169] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bb84 | out: lpNewFilePointer=0x0) returned 1 [0069.169] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x18f58, lpNewFilePointer=0x0, dwMoveMethod=0x38bc00 | out: lpNewFilePointer=0x0) returned 1 [0069.169] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bbb4 | out: lpNewFilePointer=0x0) returned 1 [0069.170] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.170] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bc64 | out: lpNewFilePointer=0x0) returned 1 [0069.171] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bbf8 | out: lpNewFilePointer=0x0) returned 1 [0069.171] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x18f58, lpNewFilePointer=0x0, dwMoveMethod=0x38bc74 | out: lpNewFilePointer=0x0) returned 1 [0069.171] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bc28 | out: lpNewFilePointer=0x0) returned 1 [0069.171] GetLastError () returned 0x0 [0069.171] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bbf0 | out: lpNewFilePointer=0x0) returned 1 [0069.172] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bb84 | out: lpNewFilePointer=0x0) returned 1 [0069.172] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x18f60, lpNewFilePointer=0x0, dwMoveMethod=0x38bc00 | out: lpNewFilePointer=0x0) returned 1 [0069.172] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bbb4 | out: lpNewFilePointer=0x0) returned 1 [0069.173] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.173] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bc64 | out: lpNewFilePointer=0x0) returned 1 [0069.173] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bbf8 | out: lpNewFilePointer=0x0) returned 1 [0069.173] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x18f60, lpNewFilePointer=0x0, dwMoveMethod=0x38bc74 | out: lpNewFilePointer=0x0) returned 1 [0069.174] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bc28 | out: lpNewFilePointer=0x0) returned 1 [0069.174] GetLastError () returned 0x0 [0069.174] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bbf0 | out: lpNewFilePointer=0x0) returned 1 [0069.174] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bb84 | out: lpNewFilePointer=0x0) returned 1 [0069.175] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x18f68, lpNewFilePointer=0x0, dwMoveMethod=0x38bc00 | out: lpNewFilePointer=0x0) returned 1 [0069.175] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bbb4 | out: lpNewFilePointer=0x0) returned 1 [0069.176] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.176] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bc64 | out: lpNewFilePointer=0x0) returned 1 [0069.176] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bbf8 | out: lpNewFilePointer=0x0) returned 1 [0069.176] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x18f68, lpNewFilePointer=0x0, dwMoveMethod=0x38bc74 | out: lpNewFilePointer=0x0) returned 1 [0069.177] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bc28 | out: lpNewFilePointer=0x0) returned 1 [0069.177] GetLastError () returned 0x0 [0069.177] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bbf0 | out: lpNewFilePointer=0x0) returned 1 [0069.177] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bb84 | out: lpNewFilePointer=0x0) returned 1 [0069.178] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x18f70, lpNewFilePointer=0x0, dwMoveMethod=0x38bc00 | out: lpNewFilePointer=0x0) returned 1 [0069.178] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bbb4 | out: lpNewFilePointer=0x0) returned 1 [0069.178] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.179] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bc64 | out: lpNewFilePointer=0x0) returned 1 [0069.179] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bbf8 | out: lpNewFilePointer=0x0) returned 1 [0069.179] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x18f70, lpNewFilePointer=0x0, dwMoveMethod=0x38bc74 | out: lpNewFilePointer=0x0) returned 1 [0069.180] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bc28 | out: lpNewFilePointer=0x0) returned 1 [0069.180] GetLastError () returned 0x0 [0069.180] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bbf0 | out: lpNewFilePointer=0x0) returned 1 [0069.180] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bb84 | out: lpNewFilePointer=0x0) returned 1 [0069.180] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x18f78, lpNewFilePointer=0x0, dwMoveMethod=0x38bc00 | out: lpNewFilePointer=0x0) returned 1 [0069.180] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bbb4 | out: lpNewFilePointer=0x0) returned 1 [0069.181] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.181] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bc64 | out: lpNewFilePointer=0x0) returned 1 [0069.181] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bbf8 | out: lpNewFilePointer=0x0) returned 1 [0069.182] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x18f78, lpNewFilePointer=0x0, dwMoveMethod=0x38bc74 | out: lpNewFilePointer=0x0) returned 1 [0069.182] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bc28 | out: lpNewFilePointer=0x0) returned 1 [0069.182] GetLastError () returned 0x0 [0069.182] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bbf0 | out: lpNewFilePointer=0x0) returned 1 [0069.183] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bb84 | out: lpNewFilePointer=0x0) returned 1 [0069.183] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x18f80, lpNewFilePointer=0x0, dwMoveMethod=0x38bc00 | out: lpNewFilePointer=0x0) returned 1 [0069.183] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bbb4 | out: lpNewFilePointer=0x0) returned 1 [0069.183] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.184] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bc64 | out: lpNewFilePointer=0x0) returned 1 [0069.184] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bbf8 | out: lpNewFilePointer=0x0) returned 1 [0069.184] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x18f80, lpNewFilePointer=0x0, dwMoveMethod=0x38bc74 | out: lpNewFilePointer=0x0) returned 1 [0069.185] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bc28 | out: lpNewFilePointer=0x0) returned 1 [0069.185] GetLastError () returned 0x0 [0069.185] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bbf0 | out: lpNewFilePointer=0x0) returned 1 [0069.185] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bb84 | out: lpNewFilePointer=0x0) returned 1 [0069.186] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x18f88, lpNewFilePointer=0x0, dwMoveMethod=0x38bc00 | out: lpNewFilePointer=0x0) returned 1 [0069.186] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bbb4 | out: lpNewFilePointer=0x0) returned 1 [0069.186] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.187] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bc64 | out: lpNewFilePointer=0x0) returned 1 [0069.187] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bbf8 | out: lpNewFilePointer=0x0) returned 1 [0069.187] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x18f88, lpNewFilePointer=0x0, dwMoveMethod=0x38bc74 | out: lpNewFilePointer=0x0) returned 1 [0069.188] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bc28 | out: lpNewFilePointer=0x0) returned 1 [0069.188] GetLastError () returned 0x0 [0069.188] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bbf0 | out: lpNewFilePointer=0x0) returned 1 [0069.188] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bb84 | out: lpNewFilePointer=0x0) returned 1 [0069.188] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x18f90, lpNewFilePointer=0x0, dwMoveMethod=0x38bc00 | out: lpNewFilePointer=0x0) returned 1 [0069.189] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bbb4 | out: lpNewFilePointer=0x0) returned 1 [0069.189] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.190] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bc64 | out: lpNewFilePointer=0x0) returned 1 [0069.190] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bbf8 | out: lpNewFilePointer=0x0) returned 1 [0069.190] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x18f90, lpNewFilePointer=0x0, dwMoveMethod=0x38bc74 | out: lpNewFilePointer=0x0) returned 1 [0069.190] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bc28 | out: lpNewFilePointer=0x0) returned 1 [0069.191] GetLastError () returned 0x0 [0069.191] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bbf0 | out: lpNewFilePointer=0x0) returned 1 [0069.191] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bb84 | out: lpNewFilePointer=0x0) returned 1 [0069.191] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x18f98, lpNewFilePointer=0x0, dwMoveMethod=0x38bc00 | out: lpNewFilePointer=0x0) returned 1 [0069.192] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bbb4 | out: lpNewFilePointer=0x0) returned 1 [0069.192] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.192] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bc64 | out: lpNewFilePointer=0x0) returned 1 [0069.193] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bbf8 | out: lpNewFilePointer=0x0) returned 1 [0069.193] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x18f98, lpNewFilePointer=0x0, dwMoveMethod=0x38bc74 | out: lpNewFilePointer=0x0) returned 1 [0069.193] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bc28 | out: lpNewFilePointer=0x0) returned 1 [0069.193] GetLastError () returned 0x0 [0069.193] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bbf0 | out: lpNewFilePointer=0x0) returned 1 [0069.194] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bb84 | out: lpNewFilePointer=0x0) returned 1 [0069.194] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x18fa0, lpNewFilePointer=0x0, dwMoveMethod=0x38bc00 | out: lpNewFilePointer=0x0) returned 1 [0069.194] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bbb4 | out: lpNewFilePointer=0x0) returned 1 [0069.195] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.195] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bc64 | out: lpNewFilePointer=0x0) returned 1 [0069.195] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bbf8 | out: lpNewFilePointer=0x0) returned 1 [0069.195] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x18fa0, lpNewFilePointer=0x0, dwMoveMethod=0x38bc74 | out: lpNewFilePointer=0x0) returned 1 [0069.196] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bc28 | out: lpNewFilePointer=0x0) returned 1 [0069.196] GetLastError () returned 0x0 [0069.196] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bbf0 | out: lpNewFilePointer=0x0) returned 1 [0069.196] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bb84 | out: lpNewFilePointer=0x0) returned 1 [0069.196] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x18fa8, lpNewFilePointer=0x0, dwMoveMethod=0x38bc00 | out: lpNewFilePointer=0x0) returned 1 [0069.197] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bbb4 | out: lpNewFilePointer=0x0) returned 1 [0069.197] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.198] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bc64 | out: lpNewFilePointer=0x0) returned 1 [0069.198] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bbf8 | out: lpNewFilePointer=0x0) returned 1 [0069.198] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x18fa8, lpNewFilePointer=0x0, dwMoveMethod=0x38bc74 | out: lpNewFilePointer=0x0) returned 1 [0069.198] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bc28 | out: lpNewFilePointer=0x0) returned 1 [0069.198] GetLastError () returned 0x0 [0069.198] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bbf0 | out: lpNewFilePointer=0x0) returned 1 [0069.199] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bb84 | out: lpNewFilePointer=0x0) returned 1 [0069.199] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x18fb0, lpNewFilePointer=0x0, dwMoveMethod=0x38bc00 | out: lpNewFilePointer=0x0) returned 1 [0069.199] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bbb4 | out: lpNewFilePointer=0x0) returned 1 [0069.205] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.206] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bc64 | out: lpNewFilePointer=0x0) returned 1 [0069.206] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bbf8 | out: lpNewFilePointer=0x0) returned 1 [0069.206] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x18fb0, lpNewFilePointer=0x0, dwMoveMethod=0x38bc74 | out: lpNewFilePointer=0x0) returned 1 [0069.207] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bc28 | out: lpNewFilePointer=0x0) returned 1 [0069.207] GetLastError () returned 0x0 [0069.207] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bbf0 | out: lpNewFilePointer=0x0) returned 1 [0069.207] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bb84 | out: lpNewFilePointer=0x0) returned 1 [0069.208] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x18fb8, lpNewFilePointer=0x0, dwMoveMethod=0x38bc00 | out: lpNewFilePointer=0x0) returned 1 [0069.208] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bbb4 | out: lpNewFilePointer=0x0) returned 1 [0069.208] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.209] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bc64 | out: lpNewFilePointer=0x0) returned 1 [0069.209] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bbf8 | out: lpNewFilePointer=0x0) returned 1 [0069.209] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x18fb8, lpNewFilePointer=0x0, dwMoveMethod=0x38bc74 | out: lpNewFilePointer=0x0) returned 1 [0069.210] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bc28 | out: lpNewFilePointer=0x0) returned 1 [0069.210] GetLastError () returned 0x0 [0069.210] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bbf0 | out: lpNewFilePointer=0x0) returned 1 [0069.210] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bb84 | out: lpNewFilePointer=0x0) returned 1 [0069.211] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x18fc0, lpNewFilePointer=0x0, dwMoveMethod=0x38bc00 | out: lpNewFilePointer=0x0) returned 1 [0069.211] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bbb4 | out: lpNewFilePointer=0x0) returned 1 [0069.211] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.212] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bc64 | out: lpNewFilePointer=0x0) returned 1 [0069.212] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bbf8 | out: lpNewFilePointer=0x0) returned 1 [0069.212] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x18fc0, lpNewFilePointer=0x0, dwMoveMethod=0x38bc74 | out: lpNewFilePointer=0x0) returned 1 [0069.212] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bc28 | out: lpNewFilePointer=0x0) returned 1 [0069.213] GetLastError () returned 0x0 [0069.213] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bbf0 | out: lpNewFilePointer=0x0) returned 1 [0069.213] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bb84 | out: lpNewFilePointer=0x0) returned 1 [0069.213] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x18fc8, lpNewFilePointer=0x0, dwMoveMethod=0x38bc00 | out: lpNewFilePointer=0x0) returned 1 [0069.214] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bbb4 | out: lpNewFilePointer=0x0) returned 1 [0069.214] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.215] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bc64 | out: lpNewFilePointer=0x0) returned 1 [0069.215] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bbf8 | out: lpNewFilePointer=0x0) returned 1 [0069.215] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x18fc8, lpNewFilePointer=0x0, dwMoveMethod=0x38bc74 | out: lpNewFilePointer=0x0) returned 1 [0069.215] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bc28 | out: lpNewFilePointer=0x0) returned 1 [0069.216] GetLastError () returned 0x0 [0069.216] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bbf0 | out: lpNewFilePointer=0x0) returned 1 [0069.216] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bb84 | out: lpNewFilePointer=0x0) returned 1 [0069.216] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x18fd0, lpNewFilePointer=0x0, dwMoveMethod=0x38bc00 | out: lpNewFilePointer=0x0) returned 1 [0069.217] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bbb4 | out: lpNewFilePointer=0x0) returned 1 [0069.217] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.217] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bc64 | out: lpNewFilePointer=0x0) returned 1 [0069.218] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bbf8 | out: lpNewFilePointer=0x0) returned 1 [0069.218] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x18fd0, lpNewFilePointer=0x0, dwMoveMethod=0x38bc74 | out: lpNewFilePointer=0x0) returned 1 [0069.218] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bc28 | out: lpNewFilePointer=0x0) returned 1 [0069.218] GetLastError () returned 0x0 [0069.219] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bbf0 | out: lpNewFilePointer=0x0) returned 1 [0069.219] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bb84 | out: lpNewFilePointer=0x0) returned 1 [0069.219] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x18fd8, lpNewFilePointer=0x0, dwMoveMethod=0x38bc00 | out: lpNewFilePointer=0x0) returned 1 [0069.219] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bbb4 | out: lpNewFilePointer=0x0) returned 1 [0069.220] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.220] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bc64 | out: lpNewFilePointer=0x0) returned 1 [0069.220] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bbf8 | out: lpNewFilePointer=0x0) returned 1 [0069.221] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x18fd8, lpNewFilePointer=0x0, dwMoveMethod=0x38bc74 | out: lpNewFilePointer=0x0) returned 1 [0069.221] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bc28 | out: lpNewFilePointer=0x0) returned 1 [0069.221] GetLastError () returned 0x0 [0069.221] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bbf0 | out: lpNewFilePointer=0x0) returned 1 [0069.221] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bb84 | out: lpNewFilePointer=0x0) returned 1 [0069.222] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x18fe0, lpNewFilePointer=0x0, dwMoveMethod=0x38bc00 | out: lpNewFilePointer=0x0) returned 1 [0069.222] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bbb4 | out: lpNewFilePointer=0x0) returned 1 [0069.222] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.222] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bc64 | out: lpNewFilePointer=0x0) returned 1 [0069.223] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bbf8 | out: lpNewFilePointer=0x0) returned 1 [0069.223] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x18fe0, lpNewFilePointer=0x0, dwMoveMethod=0x38bc74 | out: lpNewFilePointer=0x0) returned 1 [0069.223] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bc28 | out: lpNewFilePointer=0x0) returned 1 [0069.223] GetLastError () returned 0x0 [0069.223] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bbf0 | out: lpNewFilePointer=0x0) returned 1 [0069.224] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bb84 | out: lpNewFilePointer=0x0) returned 1 [0069.224] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x18fe8, lpNewFilePointer=0x0, dwMoveMethod=0x38bc00 | out: lpNewFilePointer=0x0) returned 1 [0069.224] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bbb4 | out: lpNewFilePointer=0x0) returned 1 [0069.224] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.225] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bc64 | out: lpNewFilePointer=0x0) returned 1 [0069.225] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bbf8 | out: lpNewFilePointer=0x0) returned 1 [0069.225] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x18fe8, lpNewFilePointer=0x0, dwMoveMethod=0x38bc74 | out: lpNewFilePointer=0x0) returned 1 [0069.225] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bc28 | out: lpNewFilePointer=0x0) returned 1 [0069.225] GetLastError () returned 0x0 [0069.226] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bbf0 | out: lpNewFilePointer=0x0) returned 1 [0069.226] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bb84 | out: lpNewFilePointer=0x0) returned 1 [0069.226] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x18ff0, lpNewFilePointer=0x0, dwMoveMethod=0x38bc00 | out: lpNewFilePointer=0x0) returned 1 [0069.226] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bbb4 | out: lpNewFilePointer=0x0) returned 1 [0069.226] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.227] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bc64 | out: lpNewFilePointer=0x0) returned 1 [0069.227] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bbf8 | out: lpNewFilePointer=0x0) returned 1 [0069.227] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x18ff0, lpNewFilePointer=0x0, dwMoveMethod=0x38bc74 | out: lpNewFilePointer=0x0) returned 1 [0069.227] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bc28 | out: lpNewFilePointer=0x0) returned 1 [0069.227] GetLastError () returned 0x0 [0069.227] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bbf0 | out: lpNewFilePointer=0x0) returned 1 [0069.228] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bb84 | out: lpNewFilePointer=0x0) returned 1 [0069.228] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x18ff8, lpNewFilePointer=0x0, dwMoveMethod=0x38bc00 | out: lpNewFilePointer=0x0) returned 1 [0069.228] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bbb4 | out: lpNewFilePointer=0x0) returned 1 [0069.228] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.228] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bc64 | out: lpNewFilePointer=0x0) returned 1 [0069.229] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bbf8 | out: lpNewFilePointer=0x0) returned 1 [0069.229] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x18ff8, lpNewFilePointer=0x0, dwMoveMethod=0x38bc74 | out: lpNewFilePointer=0x0) returned 1 [0069.229] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bc28 | out: lpNewFilePointer=0x0) returned 1 [0069.229] GetLastError () returned 0x0 [0069.229] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bbf0 | out: lpNewFilePointer=0x0) returned 1 [0069.229] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bb84 | out: lpNewFilePointer=0x0) returned 1 [0069.230] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x19000, lpNewFilePointer=0x0, dwMoveMethod=0x38bc00 | out: lpNewFilePointer=0x0) returned 1 [0069.230] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bbb4 | out: lpNewFilePointer=0x0) returned 1 [0069.230] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.230] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bc64 | out: lpNewFilePointer=0x0) returned 1 [0069.230] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bbf8 | out: lpNewFilePointer=0x0) returned 1 [0069.231] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x19000, lpNewFilePointer=0x0, dwMoveMethod=0x38bc74 | out: lpNewFilePointer=0x0) returned 1 [0069.231] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bc28 | out: lpNewFilePointer=0x0) returned 1 [0069.231] GetLastError () returned 0x0 [0069.231] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bbf0 | out: lpNewFilePointer=0x0) returned 1 [0069.231] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bb84 | out: lpNewFilePointer=0x0) returned 1 [0069.231] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x19008, lpNewFilePointer=0x0, dwMoveMethod=0x38bc00 | out: lpNewFilePointer=0x0) returned 1 [0069.232] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bbb4 | out: lpNewFilePointer=0x0) returned 1 [0069.232] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.232] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bc64 | out: lpNewFilePointer=0x0) returned 1 [0069.233] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bbf8 | out: lpNewFilePointer=0x0) returned 1 [0069.233] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x19008, lpNewFilePointer=0x0, dwMoveMethod=0x38bc74 | out: lpNewFilePointer=0x0) returned 1 [0069.233] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bc28 | out: lpNewFilePointer=0x0) returned 1 [0069.233] GetLastError () returned 0x0 [0069.233] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bbf0 | out: lpNewFilePointer=0x0) returned 1 [0069.234] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bb84 | out: lpNewFilePointer=0x0) returned 1 [0069.234] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x19010, lpNewFilePointer=0x0, dwMoveMethod=0x38bc00 | out: lpNewFilePointer=0x0) returned 1 [0069.234] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bbb4 | out: lpNewFilePointer=0x0) returned 1 [0069.234] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.235] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bc64 | out: lpNewFilePointer=0x0) returned 1 [0069.235] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bbf8 | out: lpNewFilePointer=0x0) returned 1 [0069.235] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x19010, lpNewFilePointer=0x0, dwMoveMethod=0x38bc74 | out: lpNewFilePointer=0x0) returned 1 [0069.236] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bc28 | out: lpNewFilePointer=0x0) returned 1 [0069.236] GetLastError () returned 0x0 [0069.236] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bbf0 | out: lpNewFilePointer=0x0) returned 1 [0069.236] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bb84 | out: lpNewFilePointer=0x0) returned 1 [0069.237] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x19018, lpNewFilePointer=0x0, dwMoveMethod=0x38bc00 | out: lpNewFilePointer=0x0) returned 1 [0069.237] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bbb4 | out: lpNewFilePointer=0x0) returned 1 [0069.237] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.237] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bc64 | out: lpNewFilePointer=0x0) returned 1 [0069.238] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bbf8 | out: lpNewFilePointer=0x0) returned 1 [0069.238] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x19018, lpNewFilePointer=0x0, dwMoveMethod=0x38bc74 | out: lpNewFilePointer=0x0) returned 1 [0069.238] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bc28 | out: lpNewFilePointer=0x0) returned 1 [0069.238] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bbf0 | out: lpNewFilePointer=0x0) returned 1 [0069.238] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bb84 | out: lpNewFilePointer=0x0) returned 1 [0069.239] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x19020, lpNewFilePointer=0x0, dwMoveMethod=0x38bc00 | out: lpNewFilePointer=0x0) returned 1 [0069.239] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bbb4 | out: lpNewFilePointer=0x0) returned 1 [0069.239] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.239] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bc64 | out: lpNewFilePointer=0x0) returned 1 [0069.239] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bbf8 | out: lpNewFilePointer=0x0) returned 1 [0069.240] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x19020, lpNewFilePointer=0x0, dwMoveMethod=0x38bc74 | out: lpNewFilePointer=0x0) returned 1 [0069.240] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bc28 | out: lpNewFilePointer=0x0) returned 1 [0069.240] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bbf0 | out: lpNewFilePointer=0x0) returned 1 [0069.240] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bb84 | out: lpNewFilePointer=0x0) returned 1 [0069.241] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x19028, lpNewFilePointer=0x0, dwMoveMethod=0x38bc00 | out: lpNewFilePointer=0x0) returned 1 [0069.241] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bbb4 | out: lpNewFilePointer=0x0) returned 1 [0069.241] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.241] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bc64 | out: lpNewFilePointer=0x0) returned 1 [0069.241] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bbf8 | out: lpNewFilePointer=0x0) returned 1 [0069.242] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x19028, lpNewFilePointer=0x0, dwMoveMethod=0x38bc74 | out: lpNewFilePointer=0x0) returned 1 [0069.242] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bc28 | out: lpNewFilePointer=0x0) returned 1 [0069.242] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bbf0 | out: lpNewFilePointer=0x0) returned 1 [0069.242] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bb84 | out: lpNewFilePointer=0x0) returned 1 [0069.242] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x19030, lpNewFilePointer=0x0, dwMoveMethod=0x38bc00 | out: lpNewFilePointer=0x0) returned 1 [0069.243] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bbb4 | out: lpNewFilePointer=0x0) returned 1 [0069.243] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.243] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bc64 | out: lpNewFilePointer=0x0) returned 1 [0069.243] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bbf8 | out: lpNewFilePointer=0x0) returned 1 [0069.243] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x19030, lpNewFilePointer=0x0, dwMoveMethod=0x38bc74 | out: lpNewFilePointer=0x0) returned 1 [0069.243] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bc28 | out: lpNewFilePointer=0x0) returned 1 [0069.244] SetFilePointerEx (in: hFile=0x74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38bbf0 | out: lpNewFilePointer=0x0) returned 1 [0069.244] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.244] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.244] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.244] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.245] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.245] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.245] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.245] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.246] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.246] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.246] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.246] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.246] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.246] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.247] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.247] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.248] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.248] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.248] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.248] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.248] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.248] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.249] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.249] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.249] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.249] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.249] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.250] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.250] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.250] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.250] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.250] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.250] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.251] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.251] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.251] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.251] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.251] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.252] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.252] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.252] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.252] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.253] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.253] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.253] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.253] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.253] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.254] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.254] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.254] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.254] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.254] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.255] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.255] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.255] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.255] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.255] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.256] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.256] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.256] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.256] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.256] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.257] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.257] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.257] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.257] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.258] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.258] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.258] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.258] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.258] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.259] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.259] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.259] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.259] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.259] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.259] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.260] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.260] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.260] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.260] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.261] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.261] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.261] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.261] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.262] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.262] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.262] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.262] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.263] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.263] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.263] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.263] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.263] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.264] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.264] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.264] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.264] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.264] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.265] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.265] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.265] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.265] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.265] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.265] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.265] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.266] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.266] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.266] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.266] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.266] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.266] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.267] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.267] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.267] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.267] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.267] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.267] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.268] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.268] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.268] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.268] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.268] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.268] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.268] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.269] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.269] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.269] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.269] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.269] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.269] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.270] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.270] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.270] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.270] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.270] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.270] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.270] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.271] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.271] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.271] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.271] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.271] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.271] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.272] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.272] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.272] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.272] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.272] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.272] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.273] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.273] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.273] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.273] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.273] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.273] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.273] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.274] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.274] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.274] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.274] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.274] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.274] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.274] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.275] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.275] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.275] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.275] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.275] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.275] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.276] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.276] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.276] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.276] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.276] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.276] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.276] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.277] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.277] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.277] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.277] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.277] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.277] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.278] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.278] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.278] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.278] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.279] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.279] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.279] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.279] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.279] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.279] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.280] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.280] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.280] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.280] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.280] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.280] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.281] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.281] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.281] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.281] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.281] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.281] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.282] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.282] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.282] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.282] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.282] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.282] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.283] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.283] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.283] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.283] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.283] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.283] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.283] ReadFile (in: hFile=0x74, lpBuffer=0x565d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x38bb98, lpOverlapped=0x0 | out: lpBuffer=0x565d40*, lpNumberOfBytesRead=0x38bb98*=0x1000, lpOverlapped=0x0) returned 1 [0069.327] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME22.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme22.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME22.CSS.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme22.css.masked"), dwFlags=0x2) returned 1 [0069.572] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME23.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme23.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME23.CSS.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme23.css.masked"), dwFlags=0x2) returned 1 [0069.785] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME24.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme24.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME24.CSS.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme24.css.masked"), dwFlags=0x2) returned 1 [0070.027] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME25.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme25.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME25.CSS.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme25.css.masked"), dwFlags=0x2) returned 1 [0070.285] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME26.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme26.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME26.CSS.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme26.css.masked"), dwFlags=0x2) returned 1 [0070.521] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME27.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme27.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME27.CSS.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme27.css.masked"), dwFlags=0x2) returned 1 [0070.893] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME28.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme28.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME28.CSS.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme28.css.masked"), dwFlags=0x2) returned 1 [0071.042] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME29.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme29.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME29.CSS.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme29.css.masked"), dwFlags=0x2) returned 1 [0071.218] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME30.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme30.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME30.CSS.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme30.css.masked"), dwFlags=0x2) returned 1 [0071.388] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME31.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme31.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME31.CSS.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme31.css.masked"), dwFlags=0x2) returned 1 [0071.656] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME32.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme32.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME32.CSS.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme32.css.masked"), dwFlags=0x2) returned 1 [0071.810] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME33.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme33.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME33.CSS.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme33.css.masked"), dwFlags=0x2) returned 1 [0071.941] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME34.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme34.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME34.CSS.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme34.css.masked"), dwFlags=0x2) returned 1 [0072.126] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME35.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme35.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME35.CSS.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme35.css.masked"), dwFlags=0x2) returned 1 [0072.260] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME36.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme36.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME36.CSS.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme36.css.masked"), dwFlags=0x2) returned 1 [0072.417] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME37.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme37.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME37.CSS.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme37.css.masked"), dwFlags=0x2) returned 1 [0072.722] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME38.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme38.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME38.CSS.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme38.css.masked"), dwFlags=0x2) returned 1 [0072.965] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME39.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme39.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME39.CSS.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme39.css.masked"), dwFlags=0x2) returned 1 [0073.147] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME40.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme40.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME40.CSS.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme40.css.masked"), dwFlags=0x2) returned 1 [0073.280] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME41.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme41.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME41.CSS.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme41.css.masked"), dwFlags=0x2) returned 1 [0073.431] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME42.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme42.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME42.CSS.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme42.css.masked"), dwFlags=0x2) returned 1 [0073.620] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME43.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme43.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME43.CSS.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme43.css.masked"), dwFlags=0x2) returned 1 [0073.804] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME44.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme44.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME44.CSS.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme44.css.masked"), dwFlags=0x2) returned 1 [0073.931] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME45.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme45.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME45.CSS.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme45.css.masked"), dwFlags=0x2) returned 1 [0074.080] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME46.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme46.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME46.CSS.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme46.css.masked"), dwFlags=0x2) returned 1 [0074.210] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME47.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme47.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME47.CSS.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme47.css.masked"), dwFlags=0x2) returned 1 [0074.351] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME48.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme48.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME48.CSS.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme48.css.masked"), dwFlags=0x2) returned 1 [0074.529] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME49.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme49.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME49.CSS.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme49.css.masked"), dwFlags=0x2) returned 1 [0074.717] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME50.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme50.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME50.CSS.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme50.css.masked"), dwFlags=0x2) returned 1 [0074.845] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME51.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme51.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME51.CSS.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme51.css.masked"), dwFlags=0x2) returned 1 [0074.997] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME52.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme52.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME52.CSS.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme52.css.masked"), dwFlags=0x2) returned 1 [0075.131] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME53.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme53.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME53.CSS.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme53.css.masked"), dwFlags=0x2) returned 1 [0075.383] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME54.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme54.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME54.CSS.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme54.css.masked"), dwFlags=0x2) returned 1 [0075.540] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME55.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme55.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME55.CSS.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme55.css.masked"), dwFlags=0x2) returned 1 [0075.549] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ba9ab90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x80aa4d00, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x80aa4d00, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0075.615] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR10F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir10f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR10F.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir10f.gif.masked"), dwFlags=0x2) returned 1 [0075.648] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR11F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir11f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR11F.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir11f.gif.masked"), dwFlags=0x2) returned 1 [0075.730] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR12F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir12f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR12F.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir12f.gif.masked"), dwFlags=0x2) returned 1 [0075.759] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR13F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir13f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR13F.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir13f.gif.masked"), dwFlags=0x2) returned 1 [0075.795] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR14F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir14f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR14F.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir14f.gif.masked"), dwFlags=0x2) returned 1 [0075.838] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR15F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir15f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR15F.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir15f.gif.masked"), dwFlags=0x2) returned 1 [0075.862] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR16F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir16f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR16F.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir16f.gif.masked"), dwFlags=0x2) returned 1 [0075.920] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR17F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir17f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR17F.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir17f.gif.masked"), dwFlags=0x2) returned 1 [0075.974] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR18F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir18f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR18F.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir18f.gif.masked"), dwFlags=0x2) returned 1 [0075.983] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR19F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir19f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR19F.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir19f.gif.masked"), dwFlags=0x2) returned 1 [0075.991] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir1b.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1B.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir1b.gif.masked"), dwFlags=0x2) returned 1 [0076.004] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir1f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1F.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir1f.gif.masked"), dwFlags=0x2) returned 1 [0076.090] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR20F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir20f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR20F.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir20f.gif.masked"), dwFlags=0x2) returned 1 [0076.144] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR21F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir21f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR21F.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir21f.gif.masked"), dwFlags=0x2) returned 1 [0076.159] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR22F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir22f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR22F.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir22f.gif.masked"), dwFlags=0x2) returned 1 [0076.214] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR23F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir23f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR23F.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir23f.gif.masked"), dwFlags=0x2) returned 1 [0076.226] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR24F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir24f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR24F.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir24f.gif.masked"), dwFlags=0x2) returned 1 [0076.332] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR25F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir25f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR25F.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir25f.gif.masked"), dwFlags=0x2) returned 1 [0076.420] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR26F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir26f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR26F.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir26f.gif.masked"), dwFlags=0x2) returned 1 [0076.434] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR27F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir27f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR27F.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir27f.gif.masked"), dwFlags=0x2) returned 1 [0076.553] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir28b.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28B.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir28b.gif.masked"), dwFlags=0x2) returned 1 [0076.593] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir28f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28F.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir28f.gif.masked"), dwFlags=0x2) returned 1 [0076.654] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir29b.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29B.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir29b.gif.masked"), dwFlags=0x2) returned 1 [0076.690] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir29f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29F.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir29f.gif.masked"), dwFlags=0x2) returned 1 [0076.794] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir2b.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2B.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir2b.gif.masked"), dwFlags=0x2) returned 1 [0076.910] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir2f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2F.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir2f.gif.masked"), dwFlags=0x2) returned 1 [0077.036] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir30b.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30B.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir30b.gif.masked"), dwFlags=0x2) returned 1 [0077.152] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir30f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30F.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir30f.gif.masked"), dwFlags=0x2) returned 1 [0077.246] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir31b.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31B.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir31b.gif.masked"), dwFlags=0x2) returned 1 [0077.469] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir31f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31F.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir31f.gif.masked"), dwFlags=0x2) returned 1 [0077.477] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir32b.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32B.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir32b.gif.masked"), dwFlags=0x2) returned 1 [0077.628] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir32f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32F.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir32f.gif.masked"), dwFlags=0x2) returned 1 [0077.637] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir33b.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33B.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir33b.gif.masked"), dwFlags=0x2) returned 1 [0077.662] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir33f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33F.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir33f.gif.masked"), dwFlags=0x2) returned 1 [0077.896] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir34b.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34B.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir34b.gif.masked"), dwFlags=0x2) returned 1 [0077.939] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir34f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34F.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir34f.gif.masked"), dwFlags=0x2) returned 1 [0077.948] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir35b.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35B.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir35b.gif.masked"), dwFlags=0x2) returned 1 [0078.128] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir35f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35F.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir35f.gif.masked"), dwFlags=0x2) returned 1 [0078.143] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir36b.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36B.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir36b.gif.masked"), dwFlags=0x2) returned 1 [0078.187] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir36f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36F.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir36f.gif.masked"), dwFlags=0x2) returned 1 [0078.287] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR37F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir37f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR37F.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir37f.gif.masked"), dwFlags=0x2) returned 1 [0078.348] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR38F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir38f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR38F.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir38f.gif.masked"), dwFlags=0x2) returned 1 [0078.435] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR39F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir39f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR39F.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir39f.gif.masked"), dwFlags=0x2) returned 1 [0078.547] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir3b.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3B.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir3b.gif.masked"), dwFlags=0x2) returned 1 [0078.577] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir3f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3F.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir3f.gif.masked"), dwFlags=0x2) returned 1 [0078.650] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR40F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir40f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR40F.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir40f.gif.masked"), dwFlags=0x2) returned 1 [0078.698] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR41F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir41f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR41F.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir41f.gif.masked"), dwFlags=0x2) returned 1 [0078.760] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR42F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir42f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR42F.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir42f.gif.masked"), dwFlags=0x2) returned 1 [0078.772] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir43b.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43B.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir43b.gif.masked"), dwFlags=0x2) returned 1 [0078.777] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir43f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43F.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir43f.gif.masked"), dwFlags=0x2) returned 1 [0078.886] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir44b.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44B.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir44b.gif.masked"), dwFlags=0x2) returned 1 [0078.909] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir44f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44F.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir44f.gif.masked"), dwFlags=0x2) returned 1 [0078.923] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir45b.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45B.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir45b.gif.masked"), dwFlags=0x2) returned 1 [0078.936] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir45f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45F.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir45f.gif.masked"), dwFlags=0x2) returned 1 [0078.946] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir46b.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46B.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir46b.gif.masked"), dwFlags=0x2) returned 1 [0078.955] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir46f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46F.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir46f.gif.masked"), dwFlags=0x2) returned 1 [0078.993] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir47b.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47B.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir47b.gif.masked"), dwFlags=0x2) returned 1 [0079.013] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir47f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47F.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir47f.gif.masked"), dwFlags=0x2) returned 1 [0079.064] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir48b.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48B.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir48b.gif.masked"), dwFlags=0x2) returned 1 [0079.075] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir48f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48F.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir48f.gif.masked"), dwFlags=0x2) returned 1 [0079.102] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir49b.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49B.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir49b.gif.masked"), dwFlags=0x2) returned 1 [0079.118] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir49f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49F.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir49f.gif.masked"), dwFlags=0x2) returned 1 [0079.174] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir4b.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4B.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir4b.gif.masked"), dwFlags=0x2) returned 1 [0079.212] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir4f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4F.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir4f.gif.masked"), dwFlags=0x2) returned 1 [0079.220] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir50b.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50B.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir50b.gif.masked"), dwFlags=0x2) returned 1 [0079.226] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir50f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50F.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir50f.gif.masked"), dwFlags=0x2) returned 1 [0079.279] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir51b.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51B.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir51b.gif.masked"), dwFlags=0x2) returned 1 [0079.292] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir51f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51F.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir51f.gif.masked"), dwFlags=0x2) returned 1 [0079.337] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir5b.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5B.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir5b.gif.masked"), dwFlags=0x2) returned 1 [0079.463] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir5f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5F.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir5f.gif.masked"), dwFlags=0x2) returned 1 [0079.477] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir6b.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6B.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir6b.gif.masked"), dwFlags=0x2) returned 1 [0079.510] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir6f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6F.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir6f.gif.masked"), dwFlags=0x2) returned 1 [0079.560] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir7b.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7B.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir7b.gif.masked"), dwFlags=0x2) returned 1 [0079.716] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir7f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7F.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir7f.gif.masked"), dwFlags=0x2) returned 1 [0079.723] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir8b.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8B.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir8b.gif.masked"), dwFlags=0x2) returned 1 [0079.828] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir8f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8F.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir8f.gif.masked"), dwFlags=0x2) returned 1 [0079.964] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir9b.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9B.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir9b.gif.masked"), dwFlags=0x2) returned 1 [0079.991] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir9f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9F.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir9f.gif.masked"), dwFlags=0x2) returned 1 [0079.994] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR00.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir00.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR00.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir00.gif.masked"), dwFlags=0x2) returned 1 [0080.003] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR10F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir10f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR10F.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir10f.gif.masked"), dwFlags=0x2) returned 1 [0080.031] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR11F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir11f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR11F.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir11f.gif.masked"), dwFlags=0x2) returned 1 [0080.076] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR12F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir12f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR12F.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir12f.gif.masked"), dwFlags=0x2) returned 1 [0080.095] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR13F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir13f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR13F.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir13f.gif.masked"), dwFlags=0x2) returned 1 [0080.178] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR14F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir14f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR14F.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir14f.gif.masked"), dwFlags=0x2) returned 1 [0080.199] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR15F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir15f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR15F.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir15f.gif.masked"), dwFlags=0x2) returned 1 [0080.215] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR16F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir16f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR16F.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir16f.gif.masked"), dwFlags=0x2) returned 1 [0080.234] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR17F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir17f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR17F.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir17f.gif.masked"), dwFlags=0x2) returned 1 [0080.271] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR18F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir18f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR18F.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir18f.gif.masked"), dwFlags=0x2) returned 1 [0080.279] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR19F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir19f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR19F.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir19f.gif.masked"), dwFlags=0x2) returned 1 [0080.285] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir1b.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1B.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir1b.gif.masked"), dwFlags=0x2) returned 1 [0080.316] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir1f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1F.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir1f.gif.masked"), dwFlags=0x2) returned 1 [0080.325] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR20F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir20f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR20F.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir20f.gif.masked"), dwFlags=0x2) returned 1 [0080.346] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR21F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir21f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR21F.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir21f.gif.masked"), dwFlags=0x2) returned 1 [0080.388] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR22F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir22f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR22F.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir22f.gif.masked"), dwFlags=0x2) returned 1 [0080.410] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR23F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir23f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR23F.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir23f.gif.masked"), dwFlags=0x2) returned 1 [0080.468] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR24F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir24f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR24F.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir24f.gif.masked"), dwFlags=0x2) returned 1 [0080.485] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR25F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir25f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR25F.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir25f.gif.masked"), dwFlags=0x2) returned 1 [0080.514] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR26F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir26f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR26F.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir26f.gif.masked"), dwFlags=0x2) returned 1 [0080.582] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR27F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir27f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR27F.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir27f.gif.masked"), dwFlags=0x2) returned 1 [0080.592] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR28F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir28f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR28F.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir28f.gif.masked"), dwFlags=0x2) returned 1 [0080.637] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR29F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir29f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR29F.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir29f.gif.masked"), dwFlags=0x2) returned 1 [0080.644] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir2b.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2B.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir2b.gif.masked"), dwFlags=0x2) returned 1 [0080.655] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir2f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2F.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir2f.gif.masked"), dwFlags=0x2) returned 1 [0080.704] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR30F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir30f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR30F.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir30f.gif.masked"), dwFlags=0x2) returned 1 [0080.796] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR31F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir31f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR31F.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir31f.gif.masked"), dwFlags=0x2) returned 1 [0080.937] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR32F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir32f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR32F.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir32f.gif.masked"), dwFlags=0x2) returned 1 [0081.052] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR33F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir33f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR33F.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir33f.gif.masked"), dwFlags=0x2) returned 1 [0081.146] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR34F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir34f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR34F.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir34f.gif.masked"), dwFlags=0x2) returned 1 [0081.174] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR35F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir35f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR35F.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir35f.gif.masked"), dwFlags=0x2) returned 1 [0081.305] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR36F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir36f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR36F.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir36f.gif.masked"), dwFlags=0x2) returned 1 [0081.368] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR37F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir37f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR37F.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir37f.gif.masked"), dwFlags=0x2) returned 1 [0081.426] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR38F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir38f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR38F.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir38f.gif.masked"), dwFlags=0x2) returned 1 [0081.484] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR39F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir39f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR39F.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir39f.gif.masked"), dwFlags=0x2) returned 1 [0081.503] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir3b.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3B.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir3b.gif.masked"), dwFlags=0x2) returned 1 [0081.543] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir3f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3F.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir3f.gif.masked"), dwFlags=0x2) returned 1 [0081.624] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR40F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir40f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR40F.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir40f.gif.masked"), dwFlags=0x2) returned 1 [0081.685] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR41F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir41f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR41F.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir41f.gif.masked"), dwFlags=0x2) returned 1 [0081.806] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR42F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir42f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR42F.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir42f.gif.masked"), dwFlags=0x2) returned 1 [0081.814] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir43b.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43B.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir43b.gif.masked"), dwFlags=0x2) returned 1 [0081.820] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir43f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43F.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir43f.gif.masked"), dwFlags=0x2) returned 1 [0081.833] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir44b.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44B.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir44b.gif.masked"), dwFlags=0x2) returned 1 [0081.847] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir44f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44F.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir44f.gif.masked"), dwFlags=0x2) returned 1 [0081.870] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir45b.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45B.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir45b.gif.masked"), dwFlags=0x2) returned 1 [0081.881] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir45f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45F.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir45f.gif.masked"), dwFlags=0x2) returned 1 [0081.919] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir46b.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46B.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir46b.gif.masked"), dwFlags=0x2) returned 1 [0081.930] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir46f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46F.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir46f.gif.masked"), dwFlags=0x2) returned 1 [0082.001] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir47b.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47B.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir47b.gif.masked"), dwFlags=0x2) returned 1 [0082.061] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir47f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47F.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir47f.gif.masked"), dwFlags=0x2) returned 1 [0082.105] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir48b.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48B.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir48b.gif.masked"), dwFlags=0x2) returned 1 [0082.119] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir48f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48F.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir48f.gif.masked"), dwFlags=0x2) returned 1 [0082.134] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir49b.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49B.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir49b.gif.masked"), dwFlags=0x2) returned 1 [0082.147] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir49f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49F.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir49f.gif.masked"), dwFlags=0x2) returned 1 [0082.169] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir4b.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4B.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir4b.gif.masked"), dwFlags=0x2) returned 1 [0082.221] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir4f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4F.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir4f.gif.masked"), dwFlags=0x2) returned 1 [0082.263] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir50b.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50B.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir50b.gif.masked"), dwFlags=0x2) returned 1 [0082.272] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir50f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50F.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir50f.gif.masked"), dwFlags=0x2) returned 1 [0082.316] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir51b.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51B.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir51b.gif.masked"), dwFlags=0x2) returned 1 [0082.326] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir51f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51F.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir51f.gif.masked"), dwFlags=0x2) returned 1 [0082.353] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir5b.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5B.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir5b.gif.masked"), dwFlags=0x2) returned 1 [0082.413] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir5f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5F.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir5f.gif.masked"), dwFlags=0x2) returned 1 [0082.463] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir6b.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6B.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir6b.gif.masked"), dwFlags=0x2) returned 1 [0082.558] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir6f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6F.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir6f.gif.masked"), dwFlags=0x2) returned 1 [0082.608] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir7b.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7B.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir7b.gif.masked"), dwFlags=0x2) returned 1 [0082.639] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir7f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7F.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir7f.gif.masked"), dwFlags=0x2) returned 1 [0082.648] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir8b.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8B.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir8b.gif.masked"), dwFlags=0x2) returned 1 [0082.663] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir8f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8F.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir8f.gif.masked"), dwFlags=0x2) returned 1 [0082.686] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir9b.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9B.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir9b.gif.masked"), dwFlags=0x2) returned 1 [0082.717] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir9f.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9F.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir9f.gif.masked"), dwFlags=0x2) returned 1 [0082.724] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3382f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x84f14580, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x84f14580, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0082.735] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Classic.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\classic.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Classic.dotx.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\classic.dotx.masked"), dwFlags=0x2) returned 1 [0082.750] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Default.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\default.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Default.dotx.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\default.dotx.masked"), dwFlags=0x2) returned 1 [0082.796] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\DefaultBlackAndWhite.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\defaultblackandwhite.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\DefaultBlackAndWhite.dotx.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\defaultblackandwhite.dotx.masked"), dwFlags=0x2) returned 1 [0082.808] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Distinctive.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\distinctive.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Distinctive.dotx.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\distinctive.dotx.masked"), dwFlags=0x2) returned 1 [0082.924] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Elegant.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\elegant.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Elegant.dotx.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\elegant.dotx.masked"), dwFlags=0x2) returned 1 [0082.940] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Fancy.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\fancy.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Fancy.dotx.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\fancy.dotx.masked"), dwFlags=0x2) returned 1 [0082.957] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Formal.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\formal.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Formal.dotx.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\formal.dotx.masked"), dwFlags=0x2) returned 1 [0083.090] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Manuscript.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\manuscript.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Manuscript.dotx.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\manuscript.dotx.masked"), dwFlags=0x2) returned 1 [0083.132] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Modern.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\modern.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Modern.dotx.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\modern.dotx.masked"), dwFlags=0x2) returned 1 [0083.658] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Newsprint.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\newsprint.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Newsprint.dotx.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\newsprint.dotx.masked"), dwFlags=0x2) returned 1 [0083.727] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Perspective.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\perspective.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Perspective.dotx.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\perspective.dotx.masked"), dwFlags=0x2) returned 1 [0083.741] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Simple.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\simple.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Simple.dotx.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\simple.dotx.masked"), dwFlags=0x2) returned 1 [0083.767] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Thatch.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\thatch.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Thatch.dotx.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\thatch.dotx.masked"), dwFlags=0x2) returned 1 [0083.823] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Traditional.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\traditional.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Traditional.dotx.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\traditional.dotx.masked"), dwFlags=0x2) returned 1 [0083.832] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\ROSE.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\rose.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\ROSE.CSS.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\rose.css.masked"), dwFlags=0x2) returned 1 [0083.841] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\SKY.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\sky.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\SKY.CSS.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\sky.css.masked"), dwFlags=0x2) returned 1 [0083.855] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\SPRING.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\spring.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\SPRING.CSS.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\spring.css.masked"), dwFlags=0x2) returned 1 [0083.867] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\SPS.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\sps.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\SPS.CSS.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\sps.css.masked"), dwFlags=0x2) returned 1 [0083.876] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\STEEL.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\steel.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\STEEL.CSS.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\steel.css.masked"), dwFlags=0x2) returned 1 [0083.884] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\SUNNY.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\sunny.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\SUNNY.CSS.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\sunny.css.masked"), dwFlags=0x2) returned 1 [0083.895] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\SUNSET.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\sunset.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\SUNSET.CSS.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\sunset.css.masked"), dwFlags=0x2) returned 1 [0083.904] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\TERRCOTT.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\terrcott.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\TERRCOTT.CSS.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\terrcott.css.masked"), dwFlags=0x2) returned 1 [0083.916] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.CSS.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.css.masked"), dwFlags=0x2) returned 1 [0083.925] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x504da6a0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x85a88f60, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x85a88f60, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0083.931] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\WDCMPVRD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\wdcmpvrd.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\WDCMPVRD.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\wdcmpvrd.xml.masked"), dwFlags=0x2) returned 1 [0083.938] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1036\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x779e270, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x85aaf0c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x85aaf0c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0083.942] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\3082\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a4f390, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x85aaf0c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x85aaf0c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0083.948] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x85ad5220, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x85ad5220, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0083.957] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\SERVWRAP.ASP" (normalized: "c:\\program files\\microsoft office\\office14\\accessweb\\servwrap.asp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\SERVWRAP.ASP.masked" (normalized: "c:\\program files\\microsoft office\\office14\\accessweb\\servwrap.asp.masked"), dwFlags=0x2) returned 1 [0083.962] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51174850, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x85afb380, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x85afb380, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0084.551] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZLIB.ACCDE" (normalized: "c:\\program files\\microsoft office\\office14\\accwiz\\acwzlib.accde"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZLIB.ACCDE.masked" (normalized: "c:\\program files\\microsoft office\\office14\\accwiz\\acwzlib.accde.masked"), dwFlags=0x2) returned 1 [0085.239] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZMAIN.ACCDE" (normalized: "c:\\program files\\microsoft office\\office14\\accwiz\\acwzmain.accde"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZMAIN.ACCDE.masked" (normalized: "c:\\program files\\microsoft office\\office14\\accwiz\\acwzmain.accde.masked"), dwFlags=0x2) returned 1 [0085.957] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZTOOL.ACCDE" (normalized: "c:\\program files\\microsoft office\\office14\\accwiz\\acwztool.accde"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZTOOL.ACCDE.masked" (normalized: "c:\\program files\\microsoft office\\office14\\accwiz\\acwztool.accde.masked"), dwFlags=0x2) returned 1 [0085.963] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\ADDINS\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfff68b70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x86e06380, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x86e06380, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0085.967] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\ADDINS\\FAXEXT.ECF" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\faxext.ecf"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\ADDINS\\FAXEXT.ECF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\faxext.ecf.masked"), dwFlags=0x2) returned 1 [0085.970] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSOSEC.XML" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\msosec.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSOSEC.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\msosec.xml.masked"), dwFlags=0x2) returned 1 [0086.004] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSSPC.ECF" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\msspc.ecf"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSSPC.ECF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\msspc.ecf.masked"), dwFlags=0x2) returned 1 [0086.010] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\ADDINS\\OUTEX.ECF" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\outex.ecf"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\ADDINS\\OUTEX.ECF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\outex.ecf.masked"), dwFlags=0x2) returned 1 [0086.013] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\ADDINS\\OUTEX2.ECF" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\outex2.ecf"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\ADDINS\\OUTEX2.ECF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\outex2.ecf.masked"), dwFlags=0x2) returned 1 [0086.016] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\ADDINS\\PMAILEXT.ECF" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\pmailext.ecf"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\ADDINS\\PMAILEXT.ECF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\pmailext.ecf.masked"), dwFlags=0x2) returned 1 [0086.023] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Bibliography\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51422110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x86e9e900, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x86e9e900, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0086.028] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51767f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x86e9e900, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x86e9e900, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0086.032] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51422110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x86e9e900, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x86e9e900, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0086.039] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\BORDERS\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58b4ce70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x86ec4a60, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x86ec4a60, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0086.044] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\CONVERT\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfff68b70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x86ec4a60, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x86ec4a60, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0086.049] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe7ef0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x86ec4a60, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x86ec4a60, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0086.053] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Document Parts\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3382f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x86eeabc0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x86eeabc0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0086.058] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3382f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x86eeabc0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x86eeabc0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0086.062] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\14\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3382f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x86eeabc0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x86eeabc0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0086.657] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\14\\Built-In Building Blocks.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\document parts\\1033\\14\\built-in building blocks.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\14\\Built-In Building Blocks.dotx.masked" (normalized: "c:\\program files\\microsoft office\\office14\\document parts\\1033\\14\\built-in building blocks.dotx.masked"), dwFlags=0x2) returned 1 [0087.192] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\ENGDIC.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\engdic.dat"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\ENGDIC.DAT.masked" (normalized: "c:\\program files\\microsoft office\\office14\\engdic.dat.masked"), dwFlags=0x2) returned 1 [0087.232] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\ENGIDX.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\engidx.dat"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\ENGIDX.DAT.masked" (normalized: "c:\\program files\\microsoft office\\office14\\engidx.dat.masked"), dwFlags=0x2) returned 1 [0087.328] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\EXLIRM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\exlirm.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\EXLIRM.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\exlirm.xml.masked"), dwFlags=0x2) returned 1 [0087.410] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\EXLIRMV.XML" (normalized: "c:\\program files\\microsoft office\\office14\\exlirmv.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\EXLIRMV.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\exlirmv.xml.masked"), dwFlags=0x2) returned 1 [0087.415] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xccc730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x87bdc360, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x87bdc360, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0087.420] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xccc730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x87bdc360, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x87bdc360, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0087.425] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\ACTIVITY.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\activity.cfg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\ACTIVITY.CFG.masked" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\activity.cfg.masked"), dwFlags=0x2) returned 1 [0087.431] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\APPT.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\appt.cfg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\APPT.CFG.masked" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\appt.cfg.masked"), dwFlags=0x2) returned 1 [0087.435] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\CNFNOT.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\cnfnot.cfg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\CNFNOT.CFG.masked" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\cnfnot.cfg.masked"), dwFlags=0x2) returned 1 [0087.438] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\CNFRES.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\cnfres.cfg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\CNFRES.CFG.masked" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\cnfres.cfg.masked"), dwFlags=0x2) returned 1 [0087.443] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\CONTACT.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\contact.cfg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\CONTACT.CFG.masked" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\contact.cfg.masked"), dwFlags=0x2) returned 1 [0087.470] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\DISTLIST.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\distlist.cfg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\DISTLIST.CFG.masked" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\distlist.cfg.masked"), dwFlags=0x2) returned 1 [0087.492] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\DOC.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\doc.cfg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\DOC.CFG.masked" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\doc.cfg.masked"), dwFlags=0x2) returned 1 [0087.546] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\EXITEM.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\exitem.cfg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\EXITEM.CFG.masked" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\exitem.cfg.masked"), dwFlags=0x2) returned 1 [0087.550] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\INFOMAIL.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\infomail.cfg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\INFOMAIL.CFG.masked" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\infomail.cfg.masked"), dwFlags=0x2) returned 1 [0087.555] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\IPM.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\ipm.cfg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\IPM.CFG.masked" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\ipm.cfg.masked"), dwFlags=0x2) returned 1 [0087.560] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\NOTE.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\note.cfg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\NOTE.CFG.masked" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\note.cfg.masked"), dwFlags=0x2) returned 1 [0087.565] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\OMSMMS.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\omsmms.cfg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\OMSMMS.CFG.masked" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\omsmms.cfg.masked"), dwFlags=0x2) returned 1 [0087.570] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\OMSSMS.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\omssms.cfg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\OMSSMS.CFG.masked" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\omssms.cfg.masked"), dwFlags=0x2) returned 1 [0087.578] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\OOFTMPL.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\ooftmpl.cfg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\OOFTMPL.CFG.masked" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\ooftmpl.cfg.masked"), dwFlags=0x2) returned 1 [0087.584] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\POST.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\post.cfg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\POST.CFG.masked" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\post.cfg.masked"), dwFlags=0x2) returned 1 [0087.590] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\POSTIT.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\postit.cfg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\POSTIT.CFG.masked" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\postit.cfg.masked"), dwFlags=0x2) returned 1 [0087.597] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\RCLRPT.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\rclrpt.cfg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\RCLRPT.CFG.masked" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\rclrpt.cfg.masked"), dwFlags=0x2) returned 1 [0087.633] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REC.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\rec.cfg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REC.CFG.masked" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\rec.cfg.masked"), dwFlags=0x2) returned 1 [0087.640] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REMOTE.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\remote.cfg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REMOTE.CFG.masked" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\remote.cfg.masked"), dwFlags=0x2) returned 1 [0087.644] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REPLTMPL.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\repltmpl.cfg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REPLTMPL.CFG.masked" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\repltmpl.cfg.masked"), dwFlags=0x2) returned 1 [0087.680] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REPORT.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\report.cfg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REPORT.CFG.masked" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\report.cfg.masked"), dwFlags=0x2) returned 1 [0087.741] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\RESEND.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\resend.cfg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\RESEND.CFG.masked" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\resend.cfg.masked"), dwFlags=0x2) returned 1 [0087.781] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\RSSITEM.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\rssitem.cfg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\RSSITEM.CFG.masked" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\rssitem.cfg.masked"), dwFlags=0x2) returned 1 [0087.786] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDCNCL.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\schdcncl.cfg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDCNCL.CFG.masked" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\schdcncl.cfg.masked"), dwFlags=0x2) returned 1 [0087.791] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDREQ.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\schdreq.cfg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDREQ.CFG.masked" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\schdreq.cfg.masked"), dwFlags=0x2) returned 1 [0087.795] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDRESN.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\schdresn.cfg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDRESN.CFG.masked" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\schdresn.cfg.masked"), dwFlags=0x2) returned 1 [0087.799] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDRESP.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\schdresp.cfg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDRESP.CFG.masked" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\schdresp.cfg.masked"), dwFlags=0x2) returned 1 [0087.805] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDREST.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\schdrest.cfg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDREST.CFG.masked" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\schdrest.cfg.masked"), dwFlags=0x2) returned 1 [0087.808] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SECREC.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\secrec.cfg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SECREC.CFG.masked" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\secrec.cfg.masked"), dwFlags=0x2) returned 1 [0087.812] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SECURE.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\secure.cfg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SECURE.CFG.masked" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\secure.cfg.masked"), dwFlags=0x2) returned 1 [0087.816] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SHARING.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\sharing.cfg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SHARING.CFG.masked" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\sharing.cfg.masked"), dwFlags=0x2) returned 1 [0087.819] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SIGN.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\sign.cfg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SIGN.CFG.masked" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\sign.cfg.masked"), dwFlags=0x2) returned 1 [0087.823] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SMIMEE.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\smimee.cfg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SMIMEE.CFG.masked" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\smimee.cfg.masked"), dwFlags=0x2) returned 1 [0087.827] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SMIMES.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\smimes.cfg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SMIMES.CFG.masked" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\smimes.cfg.masked"), dwFlags=0x2) returned 1 [0087.836] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASK.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\task.cfg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASK.CFG.masked" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\task.cfg.masked"), dwFlags=0x2) returned 1 [0087.870] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKACC.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\taskacc.cfg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKACC.CFG.masked" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\taskacc.cfg.masked"), dwFlags=0x2) returned 1 [0087.913] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKDEC.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\taskdec.cfg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKDEC.CFG.masked" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\taskdec.cfg.masked"), dwFlags=0x2) returned 1 [0087.919] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKREQ.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\taskreq.cfg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKREQ.CFG.masked" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\taskreq.cfg.masked"), dwFlags=0x2) returned 1 [0087.924] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKUPD.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\taskupd.cfg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKUPD.CFG.masked" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\taskupd.cfg.masked"), dwFlags=0x2) returned 1 [0087.930] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x880c50c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x880c50c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0087.935] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x582abeb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x880c50c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x880c50c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0087.940] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x582abeb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x880eb220, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x880eb220, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0087.945] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Components\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6d2c00d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x880eb220, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x880eb220, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x10, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0087.963] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Components\\SignedComponents.cer" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\groove.net\\components\\signedcomponents.cer"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Components\\SignedComponents.cer.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\groove.net\\components\\signedcomponents.cer.masked"), dwFlags=0x2) returned 1 [0087.971] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\ManagedObjects\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a95a430, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x881374e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x881374e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x10, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0087.974] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\ManagedObjects\\SignedManagedObjects.cer" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\groove.net\\managedobjects\\signedmanagedobjects.cer"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\ManagedObjects\\SignedManagedObjects.cer.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\groove.net\\managedobjects\\signedmanagedobjects.cer.masked"), dwFlags=0x2) returned 1 [0087.979] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x582abeb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x881374e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x881374e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x10, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0087.983] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers\\Management.cer" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\groove.net\\servers\\management.cer"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers\\Management.cer.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\groove.net\\servers\\management.cer.masked"), dwFlags=0x2) returned 1 [0088.006] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers\\RELAY.CER" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\groove.net\\servers\\relay.cer"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers\\RELAY.CER.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\groove.net\\servers\\relay.cer.masked"), dwFlags=0x2) returned 1 [0088.053] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5e490770, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x881f5bc0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x881f5bc0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0088.058] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5e490770, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x881f5bc0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x881f5bc0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x10, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0088.120] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\VeriSign_Class_3_Code_Signing_2001-4_CA.cer" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\verisign\\components\\verisign_class_3_code_signing_2001-4_ca.cer"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\VeriSign_Class_3_Code_Signing_2001-4_CA.cer.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\verisign\\components\\verisign_class_3_code_signing_2001-4_ca.cer.masked"), dwFlags=0x2) returned 1 [0088.125] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\VeriSign_Class_3_Public_Primary_CA.cer" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\verisign\\components\\verisign_class_3_public_primary_ca.cer"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\VeriSign_Class_3_Public_Primary_CA.cer.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\verisign\\components\\verisign_class_3_public_primary_ca.cer.masked"), dwFlags=0x2) returned 1 [0088.129] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\VS_ComponentSigningIntermediate.cer" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\verisign\\components\\vs_componentsigningintermediate.cer"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\VS_ComponentSigningIntermediate.cer.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\verisign\\components\\vs_componentsigningintermediate.cer.masked"), dwFlags=0x2) returned 1 [0088.135] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51b925d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x882b42a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x882b42a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0088.140] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52a72f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x882da400, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x882da400, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0088.202] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\COUGH.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\people\\cough.wav"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\COUGH.WAV.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\people\\cough.wav.masked"), dwFlags=0x2) returned 1 [0088.277] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\GIGGLE.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\people\\giggle.wav"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\GIGGLE.WAV.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\people\\giggle.wav.masked"), dwFlags=0x2) returned 1 [0088.353] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\HICCUP.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\people\\hiccup.wav"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\HICCUP.WAV.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\people\\hiccup.wav.masked"), dwFlags=0x2) returned 1 [0088.430] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\MMHMM.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\people\\mmhmm.wav"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\MMHMM.WAV.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\people\\mmhmm.wav.masked"), dwFlags=0x2) returned 1 [0088.540] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\SNEEZE.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\people\\sneeze.wav"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\SNEEZE.WAV.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\people\\sneeze.wav.masked"), dwFlags=0x2) returned 1 [0088.722] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\THROAT.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\people\\throat.wav"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\THROAT.WAV.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\people\\throat.wav.masked"), dwFlags=0x2) returned 1 [0088.782] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\Whistling.wav" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\people\\whistling.wav"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\Whistling.wav.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\people\\whistling.wav.masked"), dwFlags=0x2) returned 1 [0088.841] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51b925d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x88966080, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x88966080, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0088.879] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\ALARM.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\places\\alarm.wav"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\ALARM.WAV.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\places\\alarm.wav.masked"), dwFlags=0x2) returned 1 [0088.942] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\BUZZ.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\places\\buzz.wav"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\BUZZ.WAV.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\places\\buzz.wav.masked"), dwFlags=0x2) returned 1 [0089.007] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\LASER.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\places\\laser.wav"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\LASER.WAV.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\places\\laser.wav.masked"), dwFlags=0x2) returned 1 [0089.084] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\RADAR.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\places\\radar.wav"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\RADAR.WAV.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\places\\radar.wav.masked"), dwFlags=0x2) returned 1 [0089.154] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\TOOT.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\places\\toot.wav"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\TOOT.WAV.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\places\\toot.wav.masked"), dwFlags=0x2) returned 1 [0089.233] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\VIBE.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\places\\vibe.wav"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\VIBE.WAV.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\places\\vibe.wav.masked"), dwFlags=0x2) returned 1 [0089.323] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\WARN.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\places\\warn.wav"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\WARN.WAV.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\places\\warn.wav.masked"), dwFlags=0x2) returned 1 [0089.332] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51ce9230, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x88e28c80, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x88e28c80, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0089.398] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\CAN.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\things\\can.wav"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\CAN.WAV.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\things\\can.wav.masked"), dwFlags=0x2) returned 1 [0089.460] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\COUPLER.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\things\\coupler.wav"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\COUPLER.WAV.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\things\\coupler.wav.masked"), dwFlags=0x2) returned 1 [0089.518] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\HORN.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\things\\horn.wav"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\HORN.WAV.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\things\\horn.wav.masked"), dwFlags=0x2) returned 1 [0089.726] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\SHOT.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\things\\shot.wav"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\SHOT.WAV.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\things\\shot.wav.masked"), dwFlags=0x2) returned 1 [0089.799] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\SHOVEL.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\things\\shovel.wav"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\SHOVEL.WAV.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\things\\shovel.wav.masked"), dwFlags=0x2) returned 1 [0089.908] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\SPLASH.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\things\\splash.wav"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\SPLASH.WAV.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\things\\splash.wav.masked"), dwFlags=0x2) returned 1 [0089.947] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\WHOOSH.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\things\\whoosh.wav"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\WHOOSH.WAV.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\things\\whoosh.wav.masked"), dwFlags=0x2) returned 1 [0089.956] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51bb8730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x8941c380, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x8941c380, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0089.972] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CalendarToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\calendartooliconimages.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CalendarToolIconImages.jpg.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\calendartooliconimages.jpg.masked"), dwFlags=0x2) returned 1 [0089.977] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CalendarToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\calendartooliconimagesmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CalendarToolIconImagesMask.bmp.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\calendartooliconimagesmask.bmp.masked"), dwFlags=0x2) returned 1 [0089.986] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\ChessIconImages.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\chessiconimages.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\ChessIconImages.bmp.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\chessiconimages.bmp.masked"), dwFlags=0x2) returned 1 [0090.034] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\ChessIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\chessiconimagesmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\ChessIconImagesMask.bmp.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\chessiconimagesmask.bmp.masked"), dwFlags=0x2) returned 1 [0090.048] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CreateSpaceImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\createspaceimage.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CreateSpaceImage.jpg.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\createspaceimage.jpg.masked"), dwFlags=0x2) returned 1 [0090.089] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CreateSpaceImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\createspaceimagemask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CreateSpaceImageMask.bmp.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\createspaceimagemask.bmp.masked"), dwFlags=0x2) returned 1 [0090.143] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataListIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\datalisticonimages.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataListIconImages.jpg.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\datalisticonimages.jpg.masked"), dwFlags=0x2) returned 1 [0090.196] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataListIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\datalisticonimagesmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataListIconImagesMask.bmp.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\datalisticonimagesmask.bmp.masked"), dwFlags=0x2) returned 1 [0090.207] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataViewIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\dataviewiconimages.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataViewIconImages.jpg.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\dataviewiconimages.jpg.masked"), dwFlags=0x2) returned 1 [0090.242] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataViewIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\dataviewiconimagesmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataViewIconImagesMask.bmp.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\dataviewiconimagesmask.bmp.masked"), dwFlags=0x2) returned 1 [0090.258] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DiscussionToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\discussiontooliconimages.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DiscussionToolIconImages.jpg.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\discussiontooliconimages.jpg.masked"), dwFlags=0x2) returned 1 [0090.264] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DiscussionToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\discussiontooliconimagesmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DiscussionToolIconImagesMask.bmp.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\discussiontooliconimagesmask.bmp.masked"), dwFlags=0x2) returned 1 [0090.287] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Form_StatusImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\form_statusimage.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Form_StatusImage.jpg.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\form_statusimage.jpg.masked"), dwFlags=0x2) returned 1 [0090.318] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Form_StatusImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\form_statusimagemask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Form_StatusImageMask.bmp.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\form_statusimagemask.bmp.masked"), dwFlags=0x2) returned 1 [0090.330] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\GRIP.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\grip.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\GRIP.JPG.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\grip.jpg.masked"), dwFlags=0x2) returned 1 [0090.336] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\GRIPMASK.BMP" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\gripmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\GRIPMASK.BMP.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\gripmask.bmp.masked"), dwFlags=0x2) returned 1 [0090.354] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\InformationIcon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\informationicon.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\InformationIcon.jpg.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\informationicon.jpg.masked"), dwFlags=0x2) returned 1 [0090.359] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\InformationIconMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\informationiconmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\InformationIconMask.bmp.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\informationiconmask.bmp.masked"), dwFlags=0x2) returned 1 [0090.418] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\LoginDialogBackground.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\logindialogbackground.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\LoginDialogBackground.jpg.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\logindialogbackground.jpg.masked"), dwFlags=0x2) returned 1 [0090.431] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\LoginTool24x24Images.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\logintool24x24images.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\LoginTool24x24Images.jpg.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\logintool24x24images.jpg.masked"), dwFlags=0x2) returned 1 [0090.439] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\LoginTool24x24ImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\logintool24x24imagesmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\LoginTool24x24ImagesMask.bmp.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\logintool24x24imagesmask.bmp.masked"), dwFlags=0x2) returned 1 [0090.453] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageAttachmentIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\messageattachmenticonimages.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageAttachmentIconImages.jpg.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\messageattachmenticonimages.jpg.masked"), dwFlags=0x2) returned 1 [0090.459] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageAttachmentIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\messageattachmenticonimagesmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageAttachmentIconImagesMask.bmp.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\messageattachmenticonimagesmask.bmp.masked"), dwFlags=0x2) returned 1 [0090.471] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageHistoryIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\messagehistoryiconimages.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageHistoryIconImages.jpg.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\messagehistoryiconimages.jpg.masked"), dwFlags=0x2) returned 1 [0090.474] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageHistoryIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\messagehistoryiconimagesmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageHistoryIconImagesMask.bmp.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\messagehistoryiconimagesmask.bmp.masked"), dwFlags=0x2) returned 1 [0090.500] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierBackground.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierbackground.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierBackground.jpg.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierbackground.jpg.masked"), dwFlags=0x2) returned 1 [0090.535] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierBackgroundRTL.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierbackgroundrtl.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierBackgroundRTL.jpg.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierbackgroundrtl.jpg.masked"), dwFlags=0x2) returned 1 [0090.557] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierCloseButton.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierclosebutton.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierCloseButton.jpg.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierclosebutton.jpg.masked"), dwFlags=0x2) returned 1 [0090.566] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierDisableDownArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierdisabledownarrow.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierDisableDownArrow.jpg.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierdisabledownarrow.jpg.masked"), dwFlags=0x2) returned 1 [0090.570] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierDisableUpArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierdisableuparrow.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierDisableUpArrow.jpg.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierdisableuparrow.jpg.masked"), dwFlags=0x2) returned 1 [0090.577] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierDownArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierdownarrow.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierDownArrow.jpg.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierdownarrow.jpg.masked"), dwFlags=0x2) returned 1 [0090.584] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierUpArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifieruparrow.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierUpArrow.jpg.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifieruparrow.jpg.masked"), dwFlags=0x2) returned 1 [0090.598] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierWindowMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierwindowmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierWindowMask.bmp.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierwindowmask.bmp.masked"), dwFlags=0x2) returned 1 [0090.610] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierWindowMaskRTL.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierwindowmaskrtl.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierWindowMaskRTL.bmp.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierwindowmaskrtl.bmp.masked"), dwFlags=0x2) returned 1 [0090.633] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutlineToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\outlinetooliconimages.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutlineToolIconImages.jpg.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\outlinetooliconimages.jpg.masked"), dwFlags=0x2) returned 1 [0090.670] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutlineToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\outlinetooliconimagesmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutlineToolIconImagesMask.bmp.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\outlinetooliconimagesmask.bmp.masked"), dwFlags=0x2) returned 1 [0090.715] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutofSyncIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\outofsynciconimages.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutofSyncIconImages.jpg.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\outofsynciconimages.jpg.masked"), dwFlags=0x2) returned 1 [0090.728] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutofSyncIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\outofsynciconimagesmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutofSyncIconImagesMask.bmp.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\outofsynciconimagesmask.bmp.masked"), dwFlags=0x2) returned 1 [0090.798] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\PicturesToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\picturestooliconimages.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\PicturesToolIconImages.jpg.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\picturestooliconimages.jpg.masked"), dwFlags=0x2) returned 1 [0090.810] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\PicturesToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\picturestooliconimagesmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\PicturesToolIconImagesMask.bmp.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\picturestooliconimagesmask.bmp.masked"), dwFlags=0x2) returned 1 [0090.817] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\QuestionIcon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\questionicon.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\QuestionIcon.jpg.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\questionicon.jpg.masked"), dwFlags=0x2) returned 1 [0090.823] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\QuestionIconMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\questioniconmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\QuestionIconMask.bmp.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\questioniconmask.bmp.masked"), dwFlags=0x2) returned 1 [0090.854] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared16x16Images.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\shared16x16images.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared16x16Images.jpg.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\shared16x16images.jpg.masked"), dwFlags=0x2) returned 1 [0090.861] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared16x16ImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\shared16x16imagesmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared16x16ImagesMask.bmp.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\shared16x16imagesmask.bmp.masked"), dwFlags=0x2) returned 1 [0090.871] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared24x24Images.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\shared24x24images.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared24x24Images.jpg.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\shared24x24images.jpg.masked"), dwFlags=0x2) returned 1 [0090.880] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared24x24ImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\shared24x24imagesmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared24x24ImagesMask.bmp.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\shared24x24imagesmask.bmp.masked"), dwFlags=0x2) returned 1 [0090.894] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\SketchIconImages.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\sketchiconimages.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\SketchIconImages.bmp.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\sketchiconimages.bmp.masked"), dwFlags=0x2) returned 1 [0090.901] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\spacebackupicons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\spacebackupicons.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\spacebackupicons.jpg.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\spacebackupicons.jpg.masked"), dwFlags=0x2) returned 1 [0090.904] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\spacebackupiconsmask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\spacebackupiconsmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\spacebackupiconsmask.bmp.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\spacebackupiconsmask.bmp.masked"), dwFlags=0x2) returned 1 [0090.911] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\STOPICON.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\stopicon.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\STOPICON.JPG.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\stopicon.jpg.masked"), dwFlags=0x2) returned 1 [0090.916] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\StopIconMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\stopiconmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\StopIconMask.bmp.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\stopiconmask.bmp.masked"), dwFlags=0x2) returned 1 [0090.923] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TaskbarIconImages256Colors.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\taskbariconimages256colors.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TaskbarIconImages256Colors.bmp.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\taskbariconimages256colors.bmp.masked"), dwFlags=0x2) returned 1 [0090.927] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TaskbarIconImagesMask256Colors.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\taskbariconimagesmask256colors.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TaskbarIconImagesMask256Colors.bmp.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\taskbariconimagesmask256colors.bmp.masked"), dwFlags=0x2) returned 1 [0090.940] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TipsImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\tipsimage.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TipsImage.jpg.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\tipsimage.jpg.masked"), dwFlags=0x2) returned 1 [0090.945] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TipsImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\tipsimagemask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TipsImageMask.bmp.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\tipsimagemask.bmp.masked"), dwFlags=0x2) returned 1 [0090.950] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\VeriSignLogo.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\verisignlogo.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\VeriSignLogo.jpg.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\verisignlogo.jpg.masked"), dwFlags=0x2) returned 1 [0090.974] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\webtooliconimages.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolIconImages.jpg.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\webtooliconimages.jpg.masked"), dwFlags=0x2) returned 1 [0090.983] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\webtooliconimagesmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolIconImagesMask.bmp.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\webtooliconimagesmask.bmp.masked"), dwFlags=0x2) returned 1 [0090.993] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolImages16x16.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\webtoolimages16x16.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolImages16x16.jpg.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\webtoolimages16x16.jpg.masked"), dwFlags=0x2) returned 1 [0090.999] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolImagesMask16x16.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\webtoolimagesmask16x16.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolImagesMask16x16.bmp.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\webtoolimagesmask16x16.bmp.masked"), dwFlags=0x2) returned 1 [0091.014] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WSSFilesToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\wssfilestooliconimages.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WSSFilesToolIconImages.jpg.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\wssfilestooliconimages.jpg.masked"), dwFlags=0x2) returned 1 [0091.020] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WSSFilesToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\wssfilestooliconimagesmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WSSFilesToolIconImagesMask.bmp.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\wssfilestooliconimagesmask.bmp.masked"), dwFlags=0x2) returned 1 [0091.025] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51174850, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x89e3a100, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x89e3a100, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0091.030] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51174850, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x89e60260, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x89e60260, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0091.036] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51bb8730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x89e60260, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x89e60260, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0091.051] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\CalendarToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar\\calendartooliconimages.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\CalendarToolIconImages.jpg.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar\\calendartooliconimages.jpg.masked"), dwFlags=0x2) returned 1 [0091.058] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\CalendarToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar\\calendartooliconimagesmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\CalendarToolIconImagesMask.bmp.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar\\calendartooliconimagesmask.bmp.masked"), dwFlags=0x2) returned 1 [0091.077] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\CalendarViewButtonImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar\\calendarviewbuttonimages.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\CalendarViewButtonImages.jpg.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar\\calendarviewbuttonimages.jpg.masked"), dwFlags=0x2) returned 1 [0091.088] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\GlobeButtonImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar\\globebuttonimage.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\GlobeButtonImage.jpg.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar\\globebuttonimage.jpg.masked"), dwFlags=0x2) returned 1 [0091.094] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\GlobeButtonImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar\\globebuttonimagemask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\GlobeButtonImageMask.bmp.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar\\globebuttonimagemask.bmp.masked"), dwFlags=0x2) returned 1 [0091.099] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51317770, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x89ef87e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x89ef87e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x10, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0091.120] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Auto.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_auto.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Auto.jpg.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_auto.jpg.masked"), dwFlags=0x2) returned 1 [0091.131] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_AutoMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_automask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_AutoMask.bmp.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_automask.bmp.masked"), dwFlags=0x2) returned 1 [0091.149] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactHigh.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_contacthigh.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactHigh.jpg.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_contacthigh.jpg.masked"), dwFlags=0x2) returned 1 [0091.161] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactHighMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_contacthighmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactHighMask.bmp.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_contacthighmask.bmp.masked"), dwFlags=0x2) returned 1 [0091.181] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactLow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_contactlow.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactLow.jpg.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_contactlow.jpg.masked"), dwFlags=0x2) returned 1 [0091.196] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactLowMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_contactlowmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactLowMask.bmp.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_contactlowmask.bmp.masked"), dwFlags=0x2) returned 1 [0091.222] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileHigh.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_filehigh.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileHigh.jpg.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_filehigh.jpg.masked"), dwFlags=0x2) returned 1 [0091.233] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileHighMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_filehighmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileHighMask.bmp.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_filehighmask.bmp.masked"), dwFlags=0x2) returned 1 [0091.254] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileOff.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_fileoff.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileOff.jpg.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_fileoff.jpg.masked"), dwFlags=0x2) returned 1 [0091.269] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileOffMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_fileoffmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileOffMask.bmp.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_fileoffmask.bmp.masked"), dwFlags=0x2) returned 1 [0091.279] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_High.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_high.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_High.jpg.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_high.jpg.masked"), dwFlags=0x2) returned 1 [0091.300] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_HighMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_highmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_HighMask.bmp.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_highmask.bmp.masked"), dwFlags=0x2) returned 1 [0091.321] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Medium.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_medium.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Medium.jpg.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_medium.jpg.masked"), dwFlags=0x2) returned 1 [0091.332] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_MediumMAsk.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_mediummask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_MediumMAsk.bmp.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_mediummask.bmp.masked"), dwFlags=0x2) returned 1 [0091.370] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Off.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_off.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Off.jpg.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_off.jpg.masked"), dwFlags=0x2) returned 1 [0091.386] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_OffMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_offmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_OffMask.bmp.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_offmask.bmp.masked"), dwFlags=0x2) returned 1 [0091.402] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsincomingimage.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImage.jpg.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsincomingimage.jpg.masked"), dwFlags=0x2) returned 1 [0091.409] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsincomingimagemask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageMask.bmp.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsincomingimagemask.bmp.masked"), dwFlags=0x2) returned 1 [0091.415] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageMaskSmall.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsincomingimagemasksmall.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageMaskSmall.bmp.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsincomingimagemasksmall.bmp.masked"), dwFlags=0x2) returned 1 [0091.429] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageSmall.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsincomingimagesmall.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageSmall.jpg.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsincomingimagesmall.jpg.masked"), dwFlags=0x2) returned 1 [0091.446] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsoutgoingimage.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImage.jpg.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsoutgoingimage.jpg.masked"), dwFlags=0x2) returned 1 [0091.453] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsoutgoingimagemask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageMask.bmp.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsoutgoingimagemask.bmp.masked"), dwFlags=0x2) returned 1 [0091.458] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageMaskSmall.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsoutgoingimagemasksmall.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageMaskSmall.bmp.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsoutgoingimagemasksmall.bmp.masked"), dwFlags=0x2) returned 1 [0091.472] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageSmall.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsoutgoingimagesmall.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageSmall.jpg.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsoutgoingimagesmall.jpg.masked"), dwFlags=0x2) returned 1 [0091.491] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\MessageBoxIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\messageboxiconimages.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\MessageBoxIconImages.jpg.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\messageboxiconimages.jpg.masked"), dwFlags=0x2) returned 1 [0091.498] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\MessageBoxIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\messageboxiconimagesmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\MessageBoxIconImagesMask.bmp.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\messageboxiconimagesmask.bmp.masked"), dwFlags=0x2) returned 1 [0091.513] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIcon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\unreadicon.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIcon.jpg.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\unreadicon.jpg.masked"), dwFlags=0x2) returned 1 [0091.529] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\unreadiconimages.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIconImages.jpg.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\unreadiconimages.jpg.masked"), dwFlags=0x2) returned 1 [0091.534] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\unreadiconimagesmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIconImagesMask.bmp.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\unreadiconimagesmask.bmp.masked"), dwFlags=0x2) returned 1 [0091.543] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51cc30d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x8a322e60, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x8a322e60, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x10, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0091.550] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers\\computericon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\computers\\computericon.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers\\computericon.jpg.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\computers\\computericon.jpg.masked"), dwFlags=0x2) returned 1 [0091.556] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers\\computericonMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\computers\\computericonmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers\\computericonMask.bmp.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\computers\\computericonmask.bmp.masked"), dwFlags=0x2) returned 1 [0091.562] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e19d30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x8a348fc0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x8a348fc0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x10, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0091.580] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion\\DiscussionToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\discussion\\discussiontooliconimages.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion\\DiscussionToolIconImages.jpg.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\discussion\\discussiontooliconimages.jpg.masked"), dwFlags=0x2) returned 1 [0091.590] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion\\DiscussionToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\discussion\\discussiontooliconimagesmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion\\DiscussionToolIconImagesMask.bmp.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\discussion\\discussiontooliconimagesmask.bmp.masked"), dwFlags=0x2) returned 1 [0091.597] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\DocumentShare\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x709f1ef0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x8a395280, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x8a395280, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x10, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0091.640] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\DocumentShare\\WSSFilesToolHomePageBackground.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\documentshare\\wssfilestoolhomepagebackground.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\DocumentShare\\WSSFilesToolHomePageBackground.jpg.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\documentshare\\wssfilestoolhomepagebackground.jpg.masked"), dwFlags=0x2) returned 1 [0091.645] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51174850, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x8a4076a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x8a4076a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x10, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0091.658] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\ActiveTabImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\activetabimage.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\ActiveTabImage.jpg.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\activetabimage.jpg.masked"), dwFlags=0x2) returned 1 [0091.664] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\ActiveTabImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\activetabimagemask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\ActiveTabImageMask.bmp.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\activetabimagemask.bmp.masked"), dwFlags=0x2) returned 1 [0091.670] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\BodyPaneBackground.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\bodypanebackground.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\BodyPaneBackground.jpg.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\bodypanebackground.jpg.masked"), dwFlags=0x2) returned 1 [0091.684] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\InactiveTabImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\inactivetabimage.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\InactiveTabImage.jpg.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\inactivetabimage.jpg.masked"), dwFlags=0x2) returned 1 [0091.690] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\InactiveTabImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\inactivetabimagemask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\InactiveTabImageMask.bmp.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\inactivetabimagemask.bmp.masked"), dwFlags=0x2) returned 1 [0091.696] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\MarkupIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\markupiconimages.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\MarkupIconImages.jpg.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\markupiconimages.jpg.masked"), dwFlags=0x2) returned 1 [0091.699] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\MarkupIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\markupiconimagesmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\MarkupIconImagesMask.bmp.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\markupiconimagesmask.bmp.masked"), dwFlags=0x2) returned 1 [0091.704] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x8a49fc20, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x8a49fc20, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x10, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0091.710] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\AddToViewArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\addtoviewarrow.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\AddToViewArrow.jpg.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\addtoviewarrow.jpg.masked"), dwFlags=0x2) returned 1 [0091.715] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\AddToViewArrowMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\addtoviewarrowmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\AddToViewArrowMask.bmp.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\addtoviewarrowmask.bmp.masked"), dwFlags=0x2) returned 1 [0091.721] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\attention.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\attention.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\attention.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\attention.gif.masked"), dwFlags=0x2) returned 1 [0091.749] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\BG_ADOBE.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_adobe.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\BG_ADOBE.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_adobe.gif.masked"), dwFlags=0x2) returned 1 [0091.769] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Casual.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_casual.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Casual.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_casual.gif.masked"), dwFlags=0x2) returned 1 [0091.803] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Country.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_country.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Country.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_country.gif.masked"), dwFlags=0x2) returned 1 [0091.813] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Earthy.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_earthy.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Earthy.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_earthy.gif.masked"), dwFlags=0x2) returned 1 [0091.862] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_FormsHomePage.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_formshomepage.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_FormsHomePage.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_formshomepage.gif.masked"), dwFlags=0x2) returned 1 [0091.889] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_FormsHomePageBlank.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_formshomepageblank.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_FormsHomePageBlank.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_formshomepageblank.gif.masked"), dwFlags=0x2) returned 1 [0091.915] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_GreenTea.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_greentea.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_GreenTea.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_greentea.gif.masked"), dwFlags=0x2) returned 1 [0091.918] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Groove.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_groove.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Groove.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_groove.gif.masked"), dwFlags=0x2) returned 1 [0091.929] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_LightSpirit.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_lightspirit.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_LightSpirit.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_lightspirit.gif.masked"), dwFlags=0x2) returned 1 [0091.950] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_OliveGreen.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_olivegreen.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_OliveGreen.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_olivegreen.gif.masked"), dwFlags=0x2) returned 1 [0091.962] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Premium.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_premium.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Premium.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_premium.gif.masked"), dwFlags=0x2) returned 1 [0091.985] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_SlateBlue.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_slateblue.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_SlateBlue.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_slateblue.gif.masked"), dwFlags=0x2) returned 1 [0091.998] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_TexturedBlue.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_texturedblue.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_TexturedBlue.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_texturedblue.gif.masked"), dwFlags=0x2) returned 1 [0092.016] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_VelvetRose.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_velvetrose.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_VelvetRose.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_velvetrose.gif.masked"), dwFlags=0x2) returned 1 [0092.021] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_left.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_left.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_left.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_left.gif.masked"), dwFlags=0x2) returned 1 [0092.023] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_left_disable.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_left_disable.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_left_disable.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_left_disable.gif.masked"), dwFlags=0x2) returned 1 [0092.028] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_left_over.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_left_over.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_left_over.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_left_over.gif.masked"), dwFlags=0x2) returned 1 [0092.031] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_mid.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_mid.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_mid.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_mid.gif.masked"), dwFlags=0x2) returned 1 [0092.033] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_mid_disable.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_mid_disable.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_mid_disable.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_mid_disable.gif.masked"), dwFlags=0x2) returned 1 [0092.035] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_mid_over.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_mid_over.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_mid_over.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_mid_over.gif.masked"), dwFlags=0x2) returned 1 [0092.039] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_right.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_right.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_right.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_right.gif.masked"), dwFlags=0x2) returned 1 [0092.042] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_right_disable.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_right_disable.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_right_disable.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_right_disable.gif.masked"), dwFlags=0x2) returned 1 [0092.046] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_right_over.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_right_over.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_right_over.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_right_over.gif.masked"), dwFlags=0x2) returned 1 [0092.051] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\*", lpFindFileData=0x38a2f4 | out: lpFindFileData=0x38a2f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51741df0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x8a7e5a60, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x8a7e5a60, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e20 [0092.067] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\Attachments.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\attachments.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\Attachments.jpg.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\attachments.jpg.masked"), dwFlags=0x2) returned 1 [0092.085] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\BREAK.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\break.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\BREAK.JPG.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\break.jpg.masked"), dwFlags=0x2) returned 1 [0092.102] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\BUTTON.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\button.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\BUTTON.JPG.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\button.jpg.masked"), dwFlags=0x2) returned 1 [0092.120] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\CHECKBOX.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\checkbox.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\CHECKBOX.JPG.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\checkbox.jpg.masked"), dwFlags=0x2) returned 1 [0092.140] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\COMBOBOX.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\combobox.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\COMBOBOX.JPG.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\combobox.jpg.masked"), dwFlags=0x2) returned 1 [0092.158] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\CONTACT.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\contact.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\CONTACT.JPG.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\contact.jpg.masked"), dwFlags=0x2) returned 1 [0092.177] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\CURRENCY.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\currency.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\CURRENCY.JPG.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\currency.jpg.masked"), dwFlags=0x2) returned 1 [0092.197] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\DATE.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\date.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\DATE.JPG.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\date.jpg.masked"), dwFlags=0x2) returned 1 [0092.218] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\DATETIME.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\datetime.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\DATETIME.JPG.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\datetime.jpg.masked"), dwFlags=0x2) returned 1 [0092.237] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\DigitalInk.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\digitalink.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\DigitalInk.jpg.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\digitalink.jpg.masked"), dwFlags=0x2) returned 1 [0092.250] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\EmbeddedView.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\embeddedview.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\EmbeddedView.jpg.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\embeddedview.jpg.masked"), dwFlags=0x2) returned 1 [0092.270] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\HEADING.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\heading.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\HEADING.JPG.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\heading.jpg.masked"), dwFlags=0x2) returned 1 [0092.280] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\IMAGE.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\image.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\IMAGE.JPG.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\image.jpg.masked"), dwFlags=0x2) returned 1 [0092.287] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\LINE.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\line.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\LINE.JPG.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\line.jpg.masked"), dwFlags=0x2) returned 1 [0092.320] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\LISTBOX.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\listbox.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\LISTBOX.JPG.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\listbox.jpg.masked"), dwFlags=0x2) returned 1 [0092.343] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\NUMERIC.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\numeric.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\NUMERIC.JPG.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\numeric.jpg.masked"), dwFlags=0x2) returned 1 [0092.352] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\PASSWORD.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\password.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\PASSWORD.JPG.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\password.jpg.masked"), dwFlags=0x2) returned 1 [0092.374] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\RADIO.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\radio.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\RADIO.JPG.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\radio.jpg.masked"), dwFlags=0x2) returned 1 [0092.393] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\SectionHeading.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\sectionheading.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\SectionHeading.jpg.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\sectionheading.jpg.masked"), dwFlags=0x2) returned 1 [0092.411] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\StaticText.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\statictext.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\StaticText.jpg.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\statictext.jpg.masked"), dwFlags=0x2) returned 1 [0092.430] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\TEXTAREA.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\textarea.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\TEXTAREA.JPG.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\textarea.jpg.masked"), dwFlags=0x2) returned 1 [0092.448] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\TEXTBOX.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\textbox.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\TEXTBOX.JPG.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\textbox.jpg.masked"), dwFlags=0x2) returned 1 [0092.471] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\TEXTVIEW.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\textview.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\TEXTVIEW.JPG.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\textview.jpg.masked"), dwFlags=0x2) returned 1 [0092.490] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\UnformattedNumeric.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\unformattednumeric.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\UnformattedNumeric.jpg.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\unformattednumeric.jpg.masked"), dwFlags=0x2) returned 1 [0092.496] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsBlankPage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsblankpage.html"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsBlankPage.html.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsblankpage.html.masked"), dwFlags=0x2) returned 1 [0092.502] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsBrowserUpgrade.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsbrowserupgrade.html"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsBrowserUpgrade.html.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsbrowserupgrade.html.masked"), dwFlags=0x2) returned 1 [0092.508] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsDoNotTrust.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsdonottrust.html"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsDoNotTrust.html.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsdonottrust.html.masked"), dwFlags=0x2) returned 1 [0092.590] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsHomePage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formshomepage.html"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsHomePage.html.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formshomepage.html.masked"), dwFlags=0x2) returned 1 [0092.612] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsHomePageScript.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formshomepagescript.js"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsHomePageScript.js.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formshomepagescript.js.masked"), dwFlags=0x2) returned 1 [0092.617] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsHomePageStyle.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formshomepagestyle.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsHomePageStyle.css.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formshomepagestyle.css.masked"), dwFlags=0x2) returned 1 [0092.622] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsPreviewTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formspreviewtemplate.html"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsPreviewTemplate.html.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formspreviewtemplate.html.masked"), dwFlags=0x2) returned 1 [0092.626] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsPrintTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsprinttemplate.html"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsPrintTemplate.html.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsprinttemplate.html.masked"), dwFlags=0x2) returned 1 [0092.644] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\*", lpFindFileData=0x38a2f4 | out: lpFindFileData=0x38a2f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51d354f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x8ad8cea0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x8ad8cea0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e20 [0092.655] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsViewAttachmentIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsviewattachmenticons.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsViewAttachmentIcons.jpg.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsviewattachmenticons.jpg.masked"), dwFlags=0x2) returned 1 [0092.661] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsViewAttachmentIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsviewattachmenticonsmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsViewAttachmentIconsMask.bmp.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsviewattachmenticonsmask.bmp.masked"), dwFlags=0x2) returned 1 [0092.669] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsViewFrame.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsviewframe.html"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsViewFrame.html.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsviewframe.html.masked"), dwFlags=0x2) returned 1 [0092.680] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormToolImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formtoolimages.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormToolImages.jpg.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formtoolimages.jpg.masked"), dwFlags=0x2) returned 1 [0092.771] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\GrooveFormsMetaData.xml" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\grooveformsmetadata.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\GrooveFormsMetaData.xml.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\grooveformsmetadata.xml.masked"), dwFlags=0x2) returned 1 [0092.787] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\MENUS.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\menus.js"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\MENUS.JS.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\menus.js.masked"), dwFlags=0x2) returned 1 [0092.793] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\menu_arrow.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\menu_arrow.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\menu_arrow.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\menu_arrow.gif.masked"), dwFlags=0x2) returned 1 [0092.799] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\SEARCH.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\search.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\SEARCH.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\search.gif.masked"), dwFlags=0x2) returned 1 [0092.803] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\SPACER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\spacer.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\SPACER.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\spacer.gif.masked"), dwFlags=0x2) returned 1 [0092.854] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\SUBMIT.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\submit.js"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\SUBMIT.JS.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\submit.js.masked"), dwFlags=0x2) returned 1 [0092.864] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\utilityfunctions.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\utilityfunctions.js"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\utilityfunctions.js.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\utilityfunctions.js.masked"), dwFlags=0x2) returned 1 [0092.882] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\validation.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\validation.js"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\validation.js.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\validation.js.masked"), dwFlags=0x2) returned 1 [0092.886] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\VIEW.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\view.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\VIEW.CSS.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\view.css.masked"), dwFlags=0x2) returned 1 [0092.912] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\VIEW.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\view.js"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\VIEW.JS.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\view.js.masked"), dwFlags=0x2) returned 1 [0092.916] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\VIEWBY.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\viewby.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\VIEWBY.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\viewby.gif.masked"), dwFlags=0x2) returned 1 [0092.919] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\viewDblClick.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\viewdblclick.js"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\viewDblClick.js.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\viewdblclick.js.masked"), dwFlags=0x2) returned 1 [0092.927] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\ViewHeaderPreview.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\viewheaderpreview.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\ViewHeaderPreview.jpg.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\viewheaderpreview.jpg.masked"), dwFlags=0x2) returned 1 [0092.929] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\viewSelectionChanged.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\viewselectionchanged.js"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\viewSelectionChanged.js.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\viewselectionchanged.js.masked"), dwFlags=0x2) returned 1 [0092.936] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x8b0608c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x8b0608c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x10, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0092.940] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\ADD.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\add.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\ADD.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\add.gif.masked"), dwFlags=0x2) returned 1 [0092.946] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\AddToViewArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\addtoviewarrow.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\AddToViewArrow.jpg.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\addtoviewarrow.jpg.masked"), dwFlags=0x2) returned 1 [0092.952] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\AddToViewArrowMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\addtoviewarrowmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\AddToViewArrowMask.bmp.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\addtoviewarrowmask.bmp.masked"), dwFlags=0x2) returned 1 [0092.957] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\attention.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\attention.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\attention.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\attention.gif.masked"), dwFlags=0x2) returned 1 [0092.985] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\BG_ADOBE.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_adobe.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\BG_ADOBE.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_adobe.gif.masked"), dwFlags=0x2) returned 1 [0092.996] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Casual.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_casual.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Casual.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_casual.gif.masked"), dwFlags=0x2) returned 1 [0093.030] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Country.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_country.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Country.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_country.gif.masked"), dwFlags=0x2) returned 1 [0093.039] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Earthy.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_earthy.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Earthy.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_earthy.gif.masked"), dwFlags=0x2) returned 1 [0093.133] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_FormsHomePage.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_formshomepage.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_FormsHomePage.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_formshomepage.gif.masked"), dwFlags=0x2) returned 1 [0093.156] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_FormsHomePageBlank.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_formshomepageblank.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_FormsHomePageBlank.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_formshomepageblank.gif.masked"), dwFlags=0x2) returned 1 [0093.162] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_FormsHomePageSlice.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_formshomepageslice.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_FormsHomePageSlice.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_formshomepageslice.gif.masked"), dwFlags=0x2) returned 1 [0093.187] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_GreenTea.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_greentea.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_GreenTea.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_greentea.gif.masked"), dwFlags=0x2) returned 1 [0093.190] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Groove.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_groove.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Groove.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_groove.gif.masked"), dwFlags=0x2) returned 1 [0093.203] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_LightSpirit.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_lightspirit.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_LightSpirit.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_lightspirit.gif.masked"), dwFlags=0x2) returned 1 [0093.222] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_OliveGreen.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_olivegreen.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_OliveGreen.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_olivegreen.gif.masked"), dwFlags=0x2) returned 1 [0093.232] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Premium.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_premium.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Premium.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_premium.gif.masked"), dwFlags=0x2) returned 1 [0093.257] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_SlateBlue.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_slateblue.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_SlateBlue.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_slateblue.gif.masked"), dwFlags=0x2) returned 1 [0093.268] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_TexturedBlue.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_texturedblue.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_TexturedBlue.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_texturedblue.gif.masked"), dwFlags=0x2) returned 1 [0093.292] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_VelvetRose.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_velvetrose.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_VelvetRose.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_velvetrose.gif.masked"), dwFlags=0x2) returned 1 [0093.295] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_left.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\button_left.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_left.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\button_left.gif.masked"), dwFlags=0x2) returned 1 [0093.298] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_left_over.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\button_left_over.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_left_over.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\button_left_over.gif.masked"), dwFlags=0x2) returned 1 [0093.301] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_mid.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\button_mid.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_mid.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\button_mid.gif.masked"), dwFlags=0x2) returned 1 [0093.314] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_mid_over.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\button_mid_over.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_mid_over.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\button_mid_over.gif.masked"), dwFlags=0x2) returned 1 [0093.317] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_right.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\button_right.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_right.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\button_right.gif.masked"), dwFlags=0x2) returned 1 [0093.321] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_right_over.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\button_right_over.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_right_over.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\button_right_over.gif.masked"), dwFlags=0x2) returned 1 [0093.325] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\CALENDAR.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\calendar.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\CALENDAR.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\calendar.gif.masked"), dwFlags=0x2) returned 1 [0093.329] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\DELETE.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\delete.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\DELETE.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\delete.gif.masked"), dwFlags=0x2) returned 1 [0093.337] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\ERROR.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\error.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\ERROR.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\error.gif.masked"), dwFlags=0x2) returned 1 [0093.435] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FORM.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\form.js"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FORM.JS.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\form.js.masked"), dwFlags=0x2) returned 1 [0093.441] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsBlankPage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsblankpage.html"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsBlankPage.html.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsblankpage.html.masked"), dwFlags=0x2) returned 1 [0093.446] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsBrowserUpgrade.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsbrowserupgrade.html"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsBrowserUpgrade.html.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsbrowserupgrade.html.masked"), dwFlags=0x2) returned 1 [0093.450] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsColorChart.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formscolorchart.html"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsColorChart.html.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formscolorchart.html.masked"), dwFlags=0x2) returned 1 [0093.457] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsFormTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsformtemplate.html"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsFormTemplate.html.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsformtemplate.html.masked"), dwFlags=0x2) returned 1 [0093.463] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsHomePage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formshomepage.html"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsHomePage.html.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formshomepage.html.masked"), dwFlags=0x2) returned 1 [0093.473] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsHomePageScript.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formshomepagescript.js"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsHomePageScript.js.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formshomepagescript.js.masked"), dwFlags=0x2) returned 1 [0093.478] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsHomePageStyle.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formshomepagestyle.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsHomePageStyle.css.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formshomepagestyle.css.masked"), dwFlags=0x2) returned 1 [0093.483] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsImageTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsimagetemplate.html"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsImageTemplate.html.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsimagetemplate.html.masked"), dwFlags=0x2) returned 1 [0093.488] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsMacroTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsmacrotemplate.html"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsMacroTemplate.html.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsmacrotemplate.html.masked"), dwFlags=0x2) returned 1 [0093.509] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsPreviewTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formspreviewtemplate.html"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsPreviewTemplate.html.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formspreviewtemplate.html.masked"), dwFlags=0x2) returned 1 [0093.516] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsPrintTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsprinttemplate.html"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsPrintTemplate.html.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsprinttemplate.html.masked"), dwFlags=0x2) returned 1 [0093.522] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\*", lpFindFileData=0x38a2f4 | out: lpFindFileData=0x38a2f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x8b607d00, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x8b607d00, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x10, cFileName=".", cAlternateFileName="")) returned 0x555e20 [0093.526] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Adobe.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\adobe.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Adobe.css.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\adobe.css.masked"), dwFlags=0x2) returned 1 [0093.531] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana\\*", lpFindFileData=0x389990 | out: lpFindFileData=0x389990*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528d0030, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x8b607d00, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x8b607d00, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e60 [0093.533] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\americana\\tab_off.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana\\TAB_OFF.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\americana\\tab_off.gif.masked"), dwFlags=0x2) returned 1 [0093.537] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\americana\\tab_on.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana\\TAB_ON.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\americana\\tab_on.gif.masked"), dwFlags=0x2) returned 1 [0093.543] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\americana.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana.css.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\americana.css.masked"), dwFlags=0x2) returned 1 [0093.550] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\*", lpFindFileData=0x389990 | out: lpFindFileData=0x389990*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528d0030, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x8b62de60, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x8b62de60, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e60 [0093.552] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\BUTTON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\babyblue\\button.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\BUTTON.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\babyblue\\button.gif.masked"), dwFlags=0x2) returned 1 [0093.555] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\babyblue\\header.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\HEADER.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\babyblue\\header.gif.masked"), dwFlags=0x2) returned 1 [0093.558] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\babyblue\\tab_off.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\TAB_OFF.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\babyblue\\tab_off.gif.masked"), dwFlags=0x2) returned 1 [0093.561] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\babyblue\\tab_on.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\TAB_ON.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\babyblue\\tab_on.gif.masked"), dwFlags=0x2) returned 1 [0093.567] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\babyblue.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue.css.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\babyblue.css.masked"), dwFlags=0x2) returned 1 [0093.573] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay\\*", lpFindFileData=0x389990 | out: lpFindFileData=0x389990*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x8b67a120, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x8b67a120, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e60 [0093.575] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\biscay\\tab_off.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay\\TAB_OFF.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\biscay\\tab_off.gif.masked"), dwFlags=0x2) returned 1 [0093.578] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\biscay\\tab_on.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay\\TAB_ON.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\biscay\\tab_on.gif.masked"), dwFlags=0x2) returned 1 [0093.585] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\biscay.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay.css.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\biscay.css.masked"), dwFlags=0x2) returned 1 [0093.589] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\*", lpFindFileData=0x389990 | out: lpFindFileData=0x389990*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x8b6a0280, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x8b6a0280, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e60 [0093.591] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightorange\\background.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\background.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightorange\\background.gif.masked"), dwFlags=0x2) returned 1 [0093.594] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\button.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightorange\\button.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\button.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightorange\\button.gif.masked"), dwFlags=0x2) returned 1 [0093.597] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\tab_off.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightorange\\tab_off.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\tab_off.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightorange\\tab_off.gif.masked"), dwFlags=0x2) returned 1 [0093.600] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\tab_on.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightorange\\tab_on.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\tab_on.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightorange\\tab_on.gif.masked"), dwFlags=0x2) returned 1 [0093.606] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightorange.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange.css.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightorange.css.masked"), dwFlags=0x2) returned 1 [0093.611] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\*", lpFindFileData=0x389990 | out: lpFindFileData=0x389990*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x8b6c63e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x8b6c63e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e60 [0093.614] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightyellow\\header.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\HEADER.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightyellow\\header.gif.masked"), dwFlags=0x2) returned 1 [0093.616] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightyellow\\tab_off.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\TAB_OFF.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightyellow\\tab_off.gif.masked"), dwFlags=0x2) returned 1 [0093.619] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightyellow\\tab_on.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\TAB_ON.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightyellow\\tab_on.gif.masked"), dwFlags=0x2) returned 1 [0093.625] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightyellow.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow.css.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightyellow.css.masked"), dwFlags=0x2) returned 1 [0093.629] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Casual.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\casual.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Casual.css.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\casual.css.masked"), dwFlags=0x2) returned 1 [0093.633] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Country.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\country.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Country.css.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\country.css.masked"), dwFlags=0x2) returned 1 [0093.639] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\*", lpFindFileData=0x389990 | out: lpFindFileData=0x389990*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x8b7126a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x8b7126a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e60 [0093.640] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\desert\\header.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\HEADER.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\desert\\header.gif.masked"), dwFlags=0x2) returned 1 [0093.643] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\desert\\tab_off.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\TAB_OFF.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\desert\\tab_off.gif.masked"), dwFlags=0x2) returned 1 [0093.648] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\desert\\tab_on.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\TAB_ON.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\desert\\tab_on.gif.masked"), dwFlags=0x2) returned 1 [0093.653] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\desert.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert.css.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\desert.css.masked"), dwFlags=0x2) returned 1 [0093.657] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Earthy.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\earthy.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Earthy.css.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\earthy.css.masked"), dwFlags=0x2) returned 1 [0093.662] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\*", lpFindFileData=0x389990 | out: lpFindFileData=0x389990*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x8b75e960, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x8b75e960, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e60 [0093.664] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\graycheck\\header.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\HEADER.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\graycheck\\header.gif.masked"), dwFlags=0x2) returned 1 [0093.667] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\graycheck\\tab_off.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\TAB_OFF.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\graycheck\\tab_off.gif.masked"), dwFlags=0x2) returned 1 [0093.669] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\graycheck\\tab_on.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\TAB_ON.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\graycheck\\tab_on.gif.masked"), dwFlags=0x2) returned 1 [0093.675] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\graycheck.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck.css.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\graycheck.css.masked"), dwFlags=0x2) returned 1 [0093.681] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GreenTea.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\greentea.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GreenTea.css.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\greentea.css.masked"), dwFlags=0x2) returned 1 [0093.686] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\LightSpirit.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\lightspirit.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\LightSpirit.css.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\lightspirit.css.masked"), dwFlags=0x2) returned 1 [0093.695] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime\\*", lpFindFileData=0x389990 | out: lpFindFileData=0x389990*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x8b784ac0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x8b784ac0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e60 [0093.698] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\lime\\tab_off.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime\\TAB_OFF.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\lime\\tab_off.gif.masked"), dwFlags=0x2) returned 1 [0093.701] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\lime\\tab_on.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime\\TAB_ON.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\lime\\tab_on.gif.masked"), dwFlags=0x2) returned 1 [0093.707] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\lime.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime.css.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\lime.css.masked"), dwFlags=0x2) returned 1 [0093.711] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Maroon.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\maroon.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Maroon.css.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\maroon.css.masked"), dwFlags=0x2) returned 1 [0093.716] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\*", lpFindFileData=0x389990 | out: lpFindFileData=0x389990*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x8b7d0d80, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x8b7d0d80, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e60 [0093.720] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\oasis\\header.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\HEADER.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\oasis\\header.gif.masked"), dwFlags=0x2) returned 1 [0093.724] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\oasis\\tab_off.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\TAB_OFF.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\oasis\\tab_off.gif.masked"), dwFlags=0x2) returned 1 [0093.728] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\oasis\\tab_on.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\TAB_ON.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\oasis\\tab_on.gif.masked"), dwFlags=0x2) returned 1 [0093.734] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\oasis.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis.css.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\oasis.css.masked"), dwFlags=0x2) returned 1 [0093.738] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\OliveGreen.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\olivegreen.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\OliveGreen.css.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\olivegreen.css.masked"), dwFlags=0x2) returned 1 [0093.742] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Premium.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\premium.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Premium.css.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\premium.css.masked"), dwFlags=0x2) returned 1 [0093.748] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate\\*", lpFindFileData=0x389990 | out: lpFindFileData=0x389990*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x8b81d040, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x8b81d040, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e60 [0093.750] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\slate\\tab_off.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate\\TAB_OFF.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\slate\\tab_off.gif.masked"), dwFlags=0x2) returned 1 [0093.753] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\slate\\tab_on.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate\\TAB_ON.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\slate\\tab_on.gif.masked"), dwFlags=0x2) returned 1 [0093.759] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\slate.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate.css.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\slate.css.masked"), dwFlags=0x2) returned 1 [0093.764] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SlateBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\slateblue.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SlateBlue.css.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\slateblue.css.masked"), dwFlags=0x2) returned 1 [0093.769] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\*", lpFindFileData=0x389990 | out: lpFindFileData=0x389990*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x8b8431a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x8b8431a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e60 [0093.779] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\softblue\\background.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\background.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\softblue\\background.gif.masked"), dwFlags=0x2) returned 1 [0093.791] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\tab_off.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\softblue\\tab_off.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\tab_off.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\softblue\\tab_off.gif.masked"), dwFlags=0x2) returned 1 [0093.795] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\tab_on.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\softblue\\tab_on.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\tab_on.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\softblue\\tab_on.gif.masked"), dwFlags=0x2) returned 1 [0093.802] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\softblue.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue.css.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\softblue.css.masked"), dwFlags=0x2) returned 1 [0093.808] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen\\*", lpFindFileData=0x389990 | out: lpFindFileData=0x389990*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x8b8b55c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x8b8b55c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e60 [0093.810] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen\\BUTTON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\springgreen\\button.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen\\BUTTON.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\springgreen\\button.gif.masked"), dwFlags=0x2) returned 1 [0093.813] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\springgreen\\tab_off.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen\\TAB_OFF.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\springgreen\\tab_off.gif.masked"), dwFlags=0x2) returned 1 [0093.816] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\springgreen\\tab_on.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen\\TAB_ON.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\springgreen\\tab_on.gif.masked"), dwFlags=0x2) returned 1 [0093.825] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\springgreen.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen.css.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\springgreen.css.masked"), dwFlags=0x2) returned 1 [0093.830] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Sts.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\sts.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Sts.css.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\sts.css.masked"), dwFlags=0x2) returned 1 [0093.836] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\*", lpFindFileData=0x389990 | out: lpFindFileData=0x389990*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x8b901880, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x8b901880, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e60 [0093.837] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\sts2\\background.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\background.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\sts2\\background.gif.masked"), dwFlags=0x2) returned 1 [0093.843] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\header.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\sts2\\header.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\header.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\sts2\\header.gif.masked"), dwFlags=0x2) returned 1 [0093.846] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\tab_off.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\sts2\\tab_off.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\tab_off.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\sts2\\tab_off.gif.masked"), dwFlags=0x2) returned 1 [0093.850] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\tab_on.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\sts2\\tab_on.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\tab_on.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\sts2\\tab_on.gif.masked"), dwFlags=0x2) returned 1 [0093.855] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Sts2.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\sts2.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Sts2.css.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\sts2.css.masked"), dwFlags=0x2) returned 1 [0093.861] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\*", lpFindFileData=0x389990 | out: lpFindFileData=0x389990*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5291c2f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x8b9279e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x8b9279e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e60 [0093.864] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\swirl\\background.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\background.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\swirl\\background.gif.masked"), dwFlags=0x2) returned 1 [0093.893] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\header.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\swirl\\header.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\header.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\swirl\\header.gif.masked"), dwFlags=0x2) returned 1 [0093.898] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\tab_off.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\swirl\\tab_off.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\tab_off.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\swirl\\tab_off.gif.masked"), dwFlags=0x2) returned 1 [0093.900] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\tab_on.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\swirl\\tab_on.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\tab_on.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\swirl\\tab_on.gif.masked"), dwFlags=0x2) returned 1 [0093.909] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\swirl.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl.css.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\swirl.css.masked"), dwFlags=0x2) returned 1 [0093.914] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Teal.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\teal.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Teal.css.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\teal.css.masked"), dwFlags=0x2) returned 1 [0093.918] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\TexturedBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\texturedblue.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\TexturedBlue.css.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\texturedblue.css.masked"), dwFlags=0x2) returned 1 [0093.923] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\VelvetRose.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\velvetrose.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\VelvetRose.css.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\velvetrose.css.masked"), dwFlags=0x2) returned 1 [0093.937] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewAttachmentIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsviewattachmenticons.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewAttachmentIcons.jpg.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsviewattachmenticons.jpg.masked"), dwFlags=0x2) returned 1 [0093.942] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewAttachmentIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsviewattachmenticonsmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewAttachmentIconsMask.bmp.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsviewattachmenticonsmask.bmp.masked"), dwFlags=0x2) returned 1 [0093.951] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewFrame.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsviewframe.html"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewFrame.html.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsviewframe.html.masked"), dwFlags=0x2) returned 1 [0093.957] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsviewtemplate.html"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewTemplate.html.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsviewtemplate.html.masked"), dwFlags=0x2) returned 1 [0093.968] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormToolImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formtoolimages.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormToolImages.jpg.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formtoolimages.jpg.masked"), dwFlags=0x2) returned 1 [0093.981] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\form_edit.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\form_edit.js"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\form_edit.js.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\form_edit.js.masked"), dwFlags=0x2) returned 1 [0093.985] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\LAUNCH.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\launch.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\LAUNCH.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\launch.gif.masked"), dwFlags=0x2) returned 1 [0094.191] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\macroprogress.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\macroprogress.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\macroprogress.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\macroprogress.gif.masked"), dwFlags=0x2) returned 1 [0094.200] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\PublicFunctions.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\publicfunctions.js"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\PublicFunctions.js.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\publicfunctions.js.masked"), dwFlags=0x2) returned 1 [0094.205] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_alignleft.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_alignleft.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_alignleft.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_alignleft.gif.masked"), dwFlags=0x2) returned 1 [0094.209] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_alignright.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_alignright.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_alignright.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_alignright.gif.masked"), dwFlags=0x2) returned 1 [0094.215] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\RTF_BOLD.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_bold.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\RTF_BOLD.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_bold.gif.masked"), dwFlags=0x2) returned 1 [0094.219] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_bullets.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_bullets.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_bullets.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_bullets.gif.masked"), dwFlags=0x2) returned 1 [0094.223] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_center.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_center.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_center.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_center.gif.masked"), dwFlags=0x2) returned 1 [0094.228] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_choosecolor.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_choosecolor.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_choosecolor.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_choosecolor.gif.masked"), dwFlags=0x2) returned 1 [0094.232] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_choosefont.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_choosefont.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_choosefont.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_choosefont.gif.masked"), dwFlags=0x2) returned 1 [0094.236] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_decreaseindent.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_decreaseindent.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_decreaseindent.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_decreaseindent.gif.masked"), dwFlags=0x2) returned 1 [0094.241] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_increaseindent.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_increaseindent.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_increaseindent.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_increaseindent.gif.masked"), dwFlags=0x2) returned 1 [0094.245] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_italic.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_italic.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_italic.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_italic.gif.masked"), dwFlags=0x2) returned 1 [0094.249] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_justify.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_justify.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_justify.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_justify.gif.masked"), dwFlags=0x2) returned 1 [0094.253] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_pressed.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_pressed.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_pressed.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_pressed.gif.masked"), dwFlags=0x2) returned 1 [0094.256] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_underline.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_underline.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_underline.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_underline.gif.masked"), dwFlags=0x2) returned 1 [0094.259] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\SAVE.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\save.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\SAVE.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\save.gif.masked"), dwFlags=0x2) returned 1 [0094.342] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\SUBMIT.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\submit.js"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\SUBMIT.JS.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\submit.js.masked"), dwFlags=0x2) returned 1 [0094.375] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\utilityfunctions.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\utilityfunctions.js"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\utilityfunctions.js.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\utilityfunctions.js.masked"), dwFlags=0x2) returned 1 [0094.402] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\validation.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\validation.js"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\validation.js.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\validation.js.masked"), dwFlags=0x2) returned 1 [0094.417] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\VIEW.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\view.js"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\VIEW.JS.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\view.js.masked"), dwFlags=0x2) returned 1 [0094.424] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\ViewHeaderPreview.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\viewheaderpreview.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\ViewHeaderPreview.jpg.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\viewheaderpreview.jpg.masked"), dwFlags=0x2) returned 1 [0094.429] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x8bea8cc0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x8bea8cc0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x10, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0094.432] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\ADD.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\add.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\ADD.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\add.gif.masked"), dwFlags=0x2) returned 1 [0094.438] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\AddToViewArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\addtoviewarrow.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\AddToViewArrow.jpg.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\addtoviewarrow.jpg.masked"), dwFlags=0x2) returned 1 [0094.443] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\AddToViewArrowMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\addtoviewarrowmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\AddToViewArrowMask.bmp.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\addtoviewarrowmask.bmp.masked"), dwFlags=0x2) returned 1 [0094.449] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\attention.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\attention.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\attention.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\attention.gif.masked"), dwFlags=0x2) returned 1 [0094.475] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\BG_ADOBE.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_adobe.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\BG_ADOBE.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_adobe.gif.masked"), dwFlags=0x2) returned 1 [0094.488] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Casual.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_casual.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Casual.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_casual.gif.masked"), dwFlags=0x2) returned 1 [0094.567] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Country.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_country.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Country.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_country.gif.masked"), dwFlags=0x2) returned 1 [0094.645] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Earthy.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_earthy.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Earthy.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_earthy.gif.masked"), dwFlags=0x2) returned 1 [0094.818] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_FormsHomePage.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_formshomepage.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_FormsHomePage.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_formshomepage.gif.masked"), dwFlags=0x2) returned 1 [0094.841] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_FormsHomePageBlank.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_formshomepageblank.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_FormsHomePageBlank.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_formshomepageblank.gif.masked"), dwFlags=0x2) returned 1 [0094.851] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_FormsHomePageSlice.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_formshomepageslice.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_FormsHomePageSlice.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_formshomepageslice.gif.masked"), dwFlags=0x2) returned 1 [0094.876] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_GreenTea.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_greentea.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_GreenTea.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_greentea.gif.masked"), dwFlags=0x2) returned 1 [0094.879] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Groove.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_groove.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Groove.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_groove.gif.masked"), dwFlags=0x2) returned 1 [0094.898] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_LightSpirit.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_lightspirit.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_LightSpirit.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_lightspirit.gif.masked"), dwFlags=0x2) returned 1 [0094.917] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_OliveGreen.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_olivegreen.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_OliveGreen.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_olivegreen.gif.masked"), dwFlags=0x2) returned 1 [0094.928] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Premium.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_premium.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Premium.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_premium.gif.masked"), dwFlags=0x2) returned 1 [0094.951] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_SlateBlue.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_slateblue.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_SlateBlue.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_slateblue.gif.masked"), dwFlags=0x2) returned 1 [0094.962] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_TexturedBlue.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_texturedblue.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_TexturedBlue.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_texturedblue.gif.masked"), dwFlags=0x2) returned 1 [0094.981] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_VelvetRose.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_velvetrose.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_VelvetRose.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_velvetrose.gif.masked"), dwFlags=0x2) returned 1 [0094.984] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_left.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\button_left.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_left.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\button_left.gif.masked"), dwFlags=0x2) returned 1 [0094.987] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_left_over.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\button_left_over.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_left_over.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\button_left_over.gif.masked"), dwFlags=0x2) returned 1 [0094.989] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_mid.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\button_mid.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_mid.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\button_mid.gif.masked"), dwFlags=0x2) returned 1 [0094.992] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_mid_over.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\button_mid_over.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_mid_over.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\button_mid_over.gif.masked"), dwFlags=0x2) returned 1 [0094.994] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_right.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\button_right.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_right.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\button_right.gif.masked"), dwFlags=0x2) returned 1 [0094.997] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_right_over.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\button_right_over.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_right_over.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\button_right_over.gif.masked"), dwFlags=0x2) returned 1 [0095.003] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\CALENDAR.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\calendar.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\CALENDAR.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\calendar.gif.masked"), dwFlags=0x2) returned 1 [0095.007] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\DELETE.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\delete.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\DELETE.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\delete.gif.masked"), dwFlags=0x2) returned 1 [0095.013] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\ERROR.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\error.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\ERROR.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\error.gif.masked"), dwFlags=0x2) returned 1 [0095.093] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FORM.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\form.js"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FORM.JS.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\form.js.masked"), dwFlags=0x2) returned 1 [0095.100] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsBlankPage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsblankpage.html"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsBlankPage.html.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsblankpage.html.masked"), dwFlags=0x2) returned 1 [0095.106] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsBrowserUpgrade.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsbrowserupgrade.html"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsBrowserUpgrade.html.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsbrowserupgrade.html.masked"), dwFlags=0x2) returned 1 [0095.109] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsColorChart.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formscolorchart.html"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsColorChart.html.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formscolorchart.html.masked"), dwFlags=0x2) returned 1 [0095.117] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsFormTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsformtemplate.html"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsFormTemplate.html.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsformtemplate.html.masked"), dwFlags=0x2) returned 1 [0095.125] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsHomePage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formshomepage.html"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsHomePage.html.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formshomepage.html.masked"), dwFlags=0x2) returned 1 [0095.136] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsHomePageScript.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formshomepagescript.js"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsHomePageScript.js.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formshomepagescript.js.masked"), dwFlags=0x2) returned 1 [0095.140] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsHomePageStyle.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formshomepagestyle.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsHomePageStyle.css.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formshomepagestyle.css.masked"), dwFlags=0x2) returned 1 [0095.145] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsImageTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsimagetemplate.html"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsImageTemplate.html.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsimagetemplate.html.masked"), dwFlags=0x2) returned 1 [0095.150] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsMacroTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsmacrotemplate.html"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsMacroTemplate.html.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsmacrotemplate.html.masked"), dwFlags=0x2) returned 1 [0095.171] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsPreviewTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formspreviewtemplate.html"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsPreviewTemplate.html.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formspreviewtemplate.html.masked"), dwFlags=0x2) returned 1 [0095.177] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsPrintTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsprinttemplate.html"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsPrintTemplate.html.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsprinttemplate.html.masked"), dwFlags=0x2) returned 1 [0095.183] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\*", lpFindFileData=0x38a2f4 | out: lpFindFileData=0x38a2f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x8c5ccec0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x8c5ccec0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x10, cFileName=".", cAlternateFileName="")) returned 0x555e20 [0095.187] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Adobe.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\adobe.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Adobe.css.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\adobe.css.masked"), dwFlags=0x2) returned 1 [0095.193] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana\\*", lpFindFileData=0x389990 | out: lpFindFileData=0x389990*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5133d8d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x8c5f3020, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x8c5f3020, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e60 [0095.197] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\americana\\tab_off.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana\\TAB_OFF.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\americana\\tab_off.gif.masked"), dwFlags=0x2) returned 1 [0095.200] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\americana\\tab_on.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana\\TAB_ON.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\americana\\tab_on.gif.masked"), dwFlags=0x2) returned 1 [0095.207] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\americana.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana.css.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\americana.css.masked"), dwFlags=0x2) returned 1 [0095.212] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\*", lpFindFileData=0x389990 | out: lpFindFileData=0x389990*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51767f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x8c619180, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x8c619180, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e60 [0095.214] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\BUTTON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\babyblue\\button.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\BUTTON.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\babyblue\\button.gif.masked"), dwFlags=0x2) returned 1 [0095.218] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\babyblue\\header.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\HEADER.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\babyblue\\header.gif.masked"), dwFlags=0x2) returned 1 [0095.222] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\babyblue\\tab_off.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\TAB_OFF.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\babyblue\\tab_off.gif.masked"), dwFlags=0x2) returned 1 [0095.225] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\babyblue\\tab_on.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\TAB_ON.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\babyblue\\tab_on.gif.masked"), dwFlags=0x2) returned 1 [0095.234] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\babyblue.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue.css.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\babyblue.css.masked"), dwFlags=0x2) returned 1 [0095.240] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay\\*", lpFindFileData=0x389990 | out: lpFindFileData=0x389990*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x519a33f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x8c665440, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x8c665440, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e60 [0095.243] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\biscay\\tab_off.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay\\TAB_OFF.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\biscay\\tab_off.gif.masked"), dwFlags=0x2) returned 1 [0095.246] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\biscay\\tab_on.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay\\TAB_ON.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\biscay\\tab_on.gif.masked"), dwFlags=0x2) returned 1 [0095.256] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\biscay.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay.css.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\biscay.css.masked"), dwFlags=0x2) returned 1 [0095.263] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\*", lpFindFileData=0x389990 | out: lpFindFileData=0x389990*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a87c30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x8c68b5a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x8c68b5a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e60 [0095.264] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightorange\\background.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\background.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightorange\\background.gif.masked"), dwFlags=0x2) returned 1 [0095.267] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\BUTTON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightorange\\button.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\BUTTON.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightorange\\button.gif.masked"), dwFlags=0x2) returned 1 [0095.271] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightorange\\tab_off.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\TAB_OFF.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightorange\\tab_off.gif.masked"), dwFlags=0x2) returned 1 [0095.273] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightorange\\tab_on.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\TAB_ON.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightorange\\tab_on.gif.masked"), dwFlags=0x2) returned 1 [0095.281] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightorange.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange.css.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightorange.css.masked"), dwFlags=0x2) returned 1 [0095.288] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\*", lpFindFileData=0x389990 | out: lpFindFileData=0x389990*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a87c30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x8c6d7860, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x8c6d7860, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e60 [0095.290] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightyellow\\header.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\HEADER.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightyellow\\header.gif.masked"), dwFlags=0x2) returned 1 [0095.293] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightyellow\\tab_off.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\TAB_OFF.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightyellow\\tab_off.gif.masked"), dwFlags=0x2) returned 1 [0095.296] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightyellow\\tab_on.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\TAB_ON.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightyellow\\tab_on.gif.masked"), dwFlags=0x2) returned 1 [0095.335] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightyellow.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow.css.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightyellow.css.masked"), dwFlags=0x2) returned 1 [0095.342] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Casual.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\casual.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Casual.css.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\casual.css.masked"), dwFlags=0x2) returned 1 [0095.348] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Country.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\country.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Country.css.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\country.css.masked"), dwFlags=0x2) returned 1 [0095.356] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\*", lpFindFileData=0x389990 | out: lpFindFileData=0x389990*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51da7910, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x8c76fde0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x8c76fde0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e60 [0095.358] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\desert\\header.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\HEADER.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\desert\\header.gif.masked"), dwFlags=0x2) returned 1 [0095.361] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\desert\\tab_off.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\TAB_OFF.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\desert\\tab_off.gif.masked"), dwFlags=0x2) returned 1 [0095.366] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\desert\\tab_on.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\TAB_ON.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\desert\\tab_on.gif.masked"), dwFlags=0x2) returned 1 [0095.373] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\desert.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert.css.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\desert.css.masked"), dwFlags=0x2) returned 1 [0095.378] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Earthy.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\earthy.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Earthy.css.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\earthy.css.masked"), dwFlags=0x2) returned 1 [0095.383] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\*", lpFindFileData=0x389990 | out: lpFindFileData=0x389990*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52c3bfd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x8c7bc0a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x8c7bc0a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e60 [0095.386] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\graycheck\\header.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\HEADER.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\graycheck\\header.gif.masked"), dwFlags=0x2) returned 1 [0095.389] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\graycheck\\tab_off.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\TAB_OFF.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\graycheck\\tab_off.gif.masked"), dwFlags=0x2) returned 1 [0095.392] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\graycheck\\tab_on.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\TAB_ON.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\graycheck\\tab_on.gif.masked"), dwFlags=0x2) returned 1 [0095.399] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\graycheck.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck.css.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\graycheck.css.masked"), dwFlags=0x2) returned 1 [0095.404] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GreenTea.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\greentea.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GreenTea.css.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\greentea.css.masked"), dwFlags=0x2) returned 1 [0095.409] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\LightSpirit.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\lightspirit.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\LightSpirit.css.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\lightspirit.css.masked"), dwFlags=0x2) returned 1 [0095.417] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime\\*", lpFindFileData=0x389990 | out: lpFindFileData=0x389990*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x568309f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x8c808360, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x8c808360, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e60 [0095.419] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\lime\\tab_off.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime\\TAB_OFF.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\lime\\tab_off.gif.masked"), dwFlags=0x2) returned 1 [0095.421] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\lime\\tab_on.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime\\TAB_ON.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\lime\\tab_on.gif.masked"), dwFlags=0x2) returned 1 [0095.430] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\lime.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime.css.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\lime.css.masked"), dwFlags=0x2) returned 1 [0095.435] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Maroon.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\maroon.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Maroon.css.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\maroon.css.masked"), dwFlags=0x2) returned 1 [0095.440] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\*", lpFindFileData=0x389990 | out: lpFindFileData=0x389990*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5969b6f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x8c854620, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x8c854620, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e60 [0095.445] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\oasis\\header.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\HEADER.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\oasis\\header.gif.masked"), dwFlags=0x2) returned 1 [0095.448] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\oasis\\tab_off.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\TAB_OFF.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\oasis\\tab_off.gif.masked"), dwFlags=0x2) returned 1 [0095.452] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\oasis\\tab_on.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\TAB_ON.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\oasis\\tab_on.gif.masked"), dwFlags=0x2) returned 1 [0095.459] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\oasis.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis.css.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\oasis.css.masked"), dwFlags=0x2) returned 1 [0095.620] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\OliveGreen.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\olivegreen.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\OliveGreen.css.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\olivegreen.css.masked"), dwFlags=0x2) returned 1 [0095.698] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Premium.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\premium.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Premium.css.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\premium.css.masked"), dwFlags=0x2) returned 1 [0095.704] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate\\*", lpFindFileData=0x389990 | out: lpFindFileData=0x389990*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a9f29b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x8cab5c20, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x8cab5c20, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e60 [0095.707] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\slate\\tab_off.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate\\TAB_OFF.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\slate\\tab_off.gif.masked"), dwFlags=0x2) returned 1 [0095.710] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\slate\\tab_on.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate\\TAB_ON.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\slate\\tab_on.gif.masked"), dwFlags=0x2) returned 1 [0095.718] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\slate.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate.css.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\slate.css.masked"), dwFlags=0x2) returned 1 [0095.726] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SlateBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\slateblue.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SlateBlue.css.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\slateblue.css.masked"), dwFlags=0x2) returned 1 [0095.732] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\*", lpFindFileData=0x389990 | out: lpFindFileData=0x389990*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5aad71f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x8cb01ee0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x8cb01ee0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e60 [0095.745] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\softblue\\background.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\background.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\softblue\\background.gif.masked"), dwFlags=0x2) returned 1 [0095.748] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\softblue\\tab_off.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\TAB_OFF.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\softblue\\tab_off.gif.masked"), dwFlags=0x2) returned 1 [0095.752] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\softblue\\tab_on.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\TAB_ON.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\softblue\\tab_on.gif.masked"), dwFlags=0x2) returned 1 [0095.766] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\softblue.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue.css.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\softblue.css.masked"), dwFlags=0x2) returned 1 [0095.772] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\*", lpFindFileData=0x389990 | out: lpFindFileData=0x389990*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5ab49610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x8cb74300, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x8cb74300, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e60 [0095.774] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\BUTTON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\springgreen\\button.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\BUTTON.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\springgreen\\button.gif.masked"), dwFlags=0x2) returned 1 [0095.777] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\springgreen\\tab_off.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\TAB_OFF.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\springgreen\\tab_off.gif.masked"), dwFlags=0x2) returned 1 [0095.779] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\springgreen\\tab_on.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\TAB_ON.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\springgreen\\tab_on.gif.masked"), dwFlags=0x2) returned 1 [0095.794] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\springgreen.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen.css.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\springgreen.css.masked"), dwFlags=0x2) returned 1 [0095.834] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Sts.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\sts.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Sts.css.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\sts.css.masked"), dwFlags=0x2) returned 1 [0095.840] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\*", lpFindFileData=0x389990 | out: lpFindFileData=0x389990*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5abe1b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x8cc0c880, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x8cc0c880, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e60 [0095.842] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\sts2\\background.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\background.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\sts2\\background.gif.masked"), dwFlags=0x2) returned 1 [0095.849] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\sts2\\header.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\HEADER.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\sts2\\header.gif.masked"), dwFlags=0x2) returned 1 [0095.852] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\sts2\\tab_off.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\TAB_OFF.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\sts2\\tab_off.gif.masked"), dwFlags=0x2) returned 1 [0095.855] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\sts2\\tab_on.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\TAB_ON.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\sts2\\tab_on.gif.masked"), dwFlags=0x2) returned 1 [0095.862] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Sts2.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\sts2.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Sts2.css.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\sts2.css.masked"), dwFlags=0x2) returned 1 [0095.867] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\*", lpFindFileData=0x389990 | out: lpFindFileData=0x389990*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5ac7a110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x8cc58b40, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x8cc58b40, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e60 [0095.872] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\swirl\\background.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\background.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\swirl\\background.gif.masked"), dwFlags=0x2) returned 1 [0095.901] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\swirl\\header.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\HEADER.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\swirl\\header.gif.masked"), dwFlags=0x2) returned 1 [0095.907] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\swirl\\tab_off.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\TAB_OFF.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\swirl\\tab_off.gif.masked"), dwFlags=0x2) returned 1 [0095.911] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\swirl\\tab_on.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\TAB_ON.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\swirl\\tab_on.gif.masked"), dwFlags=0x2) returned 1 [0095.918] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\swirl.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl.css.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\swirl.css.masked"), dwFlags=0x2) returned 1 [0095.923] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Teal.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\teal.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Teal.css.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\teal.css.masked"), dwFlags=0x2) returned 1 [0095.929] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\TexturedBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\texturedblue.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\TexturedBlue.css.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\texturedblue.css.masked"), dwFlags=0x2) returned 1 [0095.948] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\VelvetRose.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\velvetrose.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\VelvetRose.css.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\velvetrose.css.masked"), dwFlags=0x2) returned 1 [0095.957] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewAttachmentIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsviewattachmenticons.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewAttachmentIcons.jpg.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsviewattachmenticons.jpg.masked"), dwFlags=0x2) returned 1 [0095.962] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewAttachmentIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsviewattachmenticonsmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewAttachmentIconsMask.bmp.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsviewattachmenticonsmask.bmp.masked"), dwFlags=0x2) returned 1 [0095.982] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewFrame.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsviewframe.html"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewFrame.html.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsviewframe.html.masked"), dwFlags=0x2) returned 1 [0095.993] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsviewtemplate.html"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewTemplate.html.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsviewtemplate.html.masked"), dwFlags=0x2) returned 1 [0096.004] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormToolImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formtoolimages.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormToolImages.jpg.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formtoolimages.jpg.masked"), dwFlags=0x2) returned 1 [0096.018] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\form_edit.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\form_edit.js"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\form_edit.js.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\form_edit.js.masked"), dwFlags=0x2) returned 1 [0096.022] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\LAUNCH.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\launch.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\LAUNCH.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\launch.gif.masked"), dwFlags=0x2) returned 1 [0096.117] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\macroprogress.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\macroprogress.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\macroprogress.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\macroprogress.gif.masked"), dwFlags=0x2) returned 1 [0096.179] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\PublicFunctions.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\publicfunctions.js"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\PublicFunctions.js.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\publicfunctions.js.masked"), dwFlags=0x2) returned 1 [0096.184] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_alignleft.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_alignleft.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_alignleft.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_alignleft.gif.masked"), dwFlags=0x2) returned 1 [0096.200] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_alignright.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_alignright.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_alignright.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_alignright.gif.masked"), dwFlags=0x2) returned 1 [0096.204] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\RTF_BOLD.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_bold.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\RTF_BOLD.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_bold.gif.masked"), dwFlags=0x2) returned 1 [0096.211] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_bullets.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_bullets.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_bullets.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_bullets.gif.masked"), dwFlags=0x2) returned 1 [0096.215] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_center.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_center.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_center.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_center.gif.masked"), dwFlags=0x2) returned 1 [0096.218] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_choosecolor.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_choosecolor.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_choosecolor.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_choosecolor.gif.masked"), dwFlags=0x2) returned 1 [0096.256] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_choosefont.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_choosefont.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_choosefont.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_choosefont.gif.masked"), dwFlags=0x2) returned 1 [0096.261] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_decreaseindent.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_decreaseindent.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_decreaseindent.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_decreaseindent.gif.masked"), dwFlags=0x2) returned 1 [0096.264] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_hyperlink.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_hyperlink.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_hyperlink.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_hyperlink.gif.masked"), dwFlags=0x2) returned 1 [0096.268] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_increaseindent.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_increaseindent.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_increaseindent.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_increaseindent.gif.masked"), dwFlags=0x2) returned 1 [0096.272] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_italic.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_italic.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_italic.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_italic.gif.masked"), dwFlags=0x2) returned 1 [0096.275] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_justify.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_justify.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_justify.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_justify.gif.masked"), dwFlags=0x2) returned 1 [0096.279] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_pressed.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_pressed.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_pressed.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_pressed.gif.masked"), dwFlags=0x2) returned 1 [0096.282] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_spellcheck.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_spellcheck.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_spellcheck.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_spellcheck.gif.masked"), dwFlags=0x2) returned 1 [0096.286] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_underline.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_underline.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_underline.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_underline.gif.masked"), dwFlags=0x2) returned 1 [0096.290] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\SAVE.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\save.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\SAVE.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\save.gif.masked"), dwFlags=0x2) returned 1 [0096.482] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\SUBMIT.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\submit.js"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\SUBMIT.JS.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\submit.js.masked"), dwFlags=0x2) returned 1 [0096.544] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\utilityfunctions.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\utilityfunctions.js"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\utilityfunctions.js.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\utilityfunctions.js.masked"), dwFlags=0x2) returned 1 [0096.640] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\validation.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\validation.js"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\validation.js.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\validation.js.masked"), dwFlags=0x2) returned 1 [0096.683] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\VIEW.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\view.js"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\VIEW.JS.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\view.js.masked"), dwFlags=0x2) returned 1 [0096.692] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\ViewHeaderPreview.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\viewheaderpreview.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\ViewHeaderPreview.jpg.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\viewheaderpreview.jpg.masked"), dwFlags=0x2) returned 1 [0096.698] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x8d43b420, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x8d43b420, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x10, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0096.701] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\ADD.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\add.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\ADD.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\add.gif.masked"), dwFlags=0x2) returned 1 [0096.714] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\attention.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\attention.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\attention.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\attention.gif.masked"), dwFlags=0x2) returned 1 [0096.735] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\CALENDAR.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\calendar.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\CALENDAR.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\calendar.gif.masked"), dwFlags=0x2) returned 1 [0096.751] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\DELETE.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\delete.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\DELETE.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\delete.gif.masked"), dwFlags=0x2) returned 1 [0096.760] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\ERROR.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\error.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\ERROR.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\error.gif.masked"), dwFlags=0x2) returned 1 [0096.893] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FORM.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\form.js"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FORM.JS.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\form.js.masked"), dwFlags=0x2) returned 1 [0096.934] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsBlankPage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsblankpage.html"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsBlankPage.html.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsblankpage.html.masked"), dwFlags=0x2) returned 1 [0096.940] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsBrowserUpgrade.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsbrowserupgrade.html"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsBrowserUpgrade.html.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsbrowserupgrade.html.masked"), dwFlags=0x2) returned 1 [0097.000] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsColorChart.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formscolorchart.html"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsColorChart.html.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formscolorchart.html.masked"), dwFlags=0x2) returned 1 [0097.009] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsFormTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsformtemplate.html"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsFormTemplate.html.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsformtemplate.html.masked"), dwFlags=0x2) returned 1 [0097.017] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsFormTemplateRTL.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsformtemplatertl.html"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsFormTemplateRTL.html.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsformtemplatertl.html.masked"), dwFlags=0x2) returned 1 [0097.022] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsImageTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsimagetemplate.html"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsImageTemplate.html.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsimagetemplate.html.masked"), dwFlags=0x2) returned 1 [0097.050] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsMacroTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsmacrotemplate.html"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsMacroTemplate.html.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsmacrotemplate.html.masked"), dwFlags=0x2) returned 1 [0097.076] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPreviewTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formspreviewtemplate.html"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPreviewTemplate.html.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formspreviewtemplate.html.masked"), dwFlags=0x2) returned 1 [0097.101] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPreviewTemplateRTL.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formspreviewtemplatertl.html"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPreviewTemplateRTL.html.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formspreviewtemplatertl.html.masked"), dwFlags=0x2) returned 1 [0097.108] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPrintTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsprinttemplate.html"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPrintTemplate.html.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsprinttemplate.html.masked"), dwFlags=0x2) returned 1 [0097.114] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPrintTemplateRTL.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsprinttemplatertl.html"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPrintTemplateRTL.html.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsprinttemplatertl.html.masked"), dwFlags=0x2) returned 1 [0097.125] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsViewAttachmentIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsviewattachmenticons.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsViewAttachmentIcons.jpg.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsviewattachmenticons.jpg.masked"), dwFlags=0x2) returned 1 [0097.130] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsViewAttachmentIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsviewattachmenticonsmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsViewAttachmentIconsMask.bmp.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsviewattachmenticonsmask.bmp.masked"), dwFlags=0x2) returned 1 [0097.147] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\form_edit.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\form_edit.js"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\form_edit.js.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\form_edit.js.masked"), dwFlags=0x2) returned 1 [0097.229] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\InfoPathWelcomeImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\infopathwelcomeimage.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\InfoPathWelcomeImage.jpg.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\infopathwelcomeimage.jpg.masked"), dwFlags=0x2) returned 1 [0097.233] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\LAUNCH.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\launch.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\LAUNCH.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\launch.gif.masked"), dwFlags=0x2) returned 1 [0097.475] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\macroprogress.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\macroprogress.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\macroprogress.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\macroprogress.gif.masked"), dwFlags=0x2) returned 1 [0097.490] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\PublicFunctions.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\publicfunctions.js"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\PublicFunctions.js.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\publicfunctions.js.masked"), dwFlags=0x2) returned 1 [0097.494] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_alignleft.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_alignleft.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_alignleft.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_alignleft.gif.masked"), dwFlags=0x2) returned 1 [0097.498] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_alignright.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_alignright.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_alignright.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_alignright.gif.masked"), dwFlags=0x2) returned 1 [0097.502] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_bullets.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_bullets.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_bullets.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_bullets.gif.masked"), dwFlags=0x2) returned 1 [0097.505] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_center.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_center.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_center.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_center.gif.masked"), dwFlags=0x2) returned 1 [0097.509] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_choosecolor.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_choosecolor.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_choosecolor.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_choosecolor.gif.masked"), dwFlags=0x2) returned 1 [0097.512] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_decreaseindent.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_decreaseindent.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_decreaseindent.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_decreaseindent.gif.masked"), dwFlags=0x2) returned 1 [0097.515] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_hyperlink.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_hyperlink.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_hyperlink.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_hyperlink.gif.masked"), dwFlags=0x2) returned 1 [0097.518] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_increaseindent.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_increaseindent.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_increaseindent.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_increaseindent.gif.masked"), dwFlags=0x2) returned 1 [0097.522] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_justify.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_justify.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_justify.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_justify.gif.masked"), dwFlags=0x2) returned 1 [0097.525] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_pressed.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_pressed.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_pressed.gif.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_pressed.gif.masked"), dwFlags=0x2) returned 1 [0097.528] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\SAVE.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\save.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\SAVE.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\save.gif.masked"), dwFlags=0x2) returned 1 [0097.635] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\SUBMIT.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\submit.js"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\SUBMIT.JS.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\submit.js.masked"), dwFlags=0x2) returned 1 [0097.697] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\utilityfunctions.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\utilityfunctions.js"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\utilityfunctions.js.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\utilityfunctions.js.masked"), dwFlags=0x2) returned 1 [0097.729] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\validation.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\validation.js"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\validation.js.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\validation.js.masked"), dwFlags=0x2) returned 1 [0097.735] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a61ad0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x8de33040, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x8de33040, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x10, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0097.743] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\BriefcaseIcon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\briefcaseicon.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\BriefcaseIcon.jpg.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\briefcaseicon.jpg.masked"), dwFlags=0x2) returned 1 [0097.753] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\BriefcaseIconMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\briefcaseiconmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\BriefcaseIconMask.bmp.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\briefcaseiconmask.bmp.masked"), dwFlags=0x2) returned 1 [0097.771] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\CircleIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\circleicons.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\CircleIcons.jpg.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\circleicons.jpg.masked"), dwFlags=0x2) returned 1 [0097.779] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\CircleIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\circleiconsmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\CircleIconsMask.bmp.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\circleiconsmask.bmp.masked"), dwFlags=0x2) returned 1 [0097.803] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\MeetingIcon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\meetingicon.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\MeetingIcon.jpg.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\meetingicon.jpg.masked"), dwFlags=0x2) returned 1 [0097.809] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\MeetingIconMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\meetingiconmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\MeetingIconMask.bmp.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\meetingiconmask.bmp.masked"), dwFlags=0x2) returned 1 [0097.822] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectStatusIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projectstatusicons.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectStatusIcons.jpg.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projectstatusicons.jpg.masked"), dwFlags=0x2) returned 1 [0097.828] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectStatusIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projectstatusiconsmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectStatusIconsMask.bmp.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projectstatusiconsmask.bmp.masked"), dwFlags=0x2) returned 1 [0097.840] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTaskIcon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttaskicon.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTaskIcon.jpg.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttaskicon.jpg.masked"), dwFlags=0x2) returned 1 [0097.846] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTaskIconMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttaskiconmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTaskIconMask.bmp.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttaskiconmask.bmp.masked"), dwFlags=0x2) returned 1 [0097.851] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\*", lpFindFileData=0x38a2f4 | out: lpFindFileData=0x38a2f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x538bb350, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x8df3d9e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x8df3d9e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e20 [0097.855] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\*", lpFindFileData=0x389990 | out: lpFindFileData=0x389990*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x538bb350, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x8df3d9e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x8df3d9e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e60 [0097.859] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Basic\\*", lpFindFileData=0x38902c | out: lpFindFileData=0x38902c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6073a7d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x8df63b40, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x8df63b40, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555ea0 [0097.862] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\*", lpFindFileData=0x38902c | out: lpFindFileData=0x38902c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x538bb350, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x8df63b40, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x8df63b40, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555ea0 [0097.870] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\Hierarchy.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttool\\project report type\\fancy\\hierarchy.js"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\Hierarchy.js.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttool\\project report type\\fancy\\hierarchy.js.masked"), dwFlags=0x2) returned 1 [0097.875] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\MINUS.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttool\\project report type\\fancy\\minus.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\MINUS.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttool\\project report type\\fancy\\minus.gif.masked"), dwFlags=0x2) returned 1 [0097.880] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\PLUS.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttool\\project report type\\fancy\\plus.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\PLUS.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttool\\project report type\\fancy\\plus.gif.masked"), dwFlags=0x2) returned 1 [0097.884] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\SPACER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttool\\project report type\\fancy\\spacer.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\SPACER.GIF.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttool\\project report type\\fancy\\spacer.gif.masked"), dwFlags=0x2) returned 1 [0097.907] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectToolsetIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttoolseticonimages.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectToolsetIconImages.jpg.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttoolseticonimages.jpg.masked"), dwFlags=0x2) returned 1 [0097.920] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectToolsetIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttoolseticonimagesmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectToolsetIconImagesMask.bmp.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttoolseticonimagesmask.bmp.masked"), dwFlags=0x2) returned 1 [0097.946] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\SplashImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\splashimage.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\SplashImage.jpg.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\splashimage.jpg.masked"), dwFlags=0x2) returned 1 [0098.028] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\SplashImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\splashimagemask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\SplashImageMask.bmp.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\splashimagemask.bmp.masked"), dwFlags=0x2) returned 1 [0098.033] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\TABMASK.BMP" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\tabmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\TABMASK.BMP.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\tabmask.bmp.masked"), dwFlags=0x2) returned 1 [0098.040] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\TABOFF.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\taboff.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\TABOFF.JPG.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\taboff.jpg.masked"), dwFlags=0x2) returned 1 [0098.045] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\TABON.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\tabon.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\TABON.JPG.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\tabon.jpg.masked"), dwFlags=0x2) returned 1 [0098.055] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\WHITEBOX.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\whitebox.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\WHITEBOX.JPG.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\whitebox.jpg.masked"), dwFlags=0x2) returned 1 [0098.081] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\WhiteboxMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\whiteboxmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\WhiteboxMask.bmp.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\whiteboxmask.bmp.masked"), dwFlags=0x2) returned 1 [0098.090] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ZoomIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\zoomicons.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ZoomIcons.jpg.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\zoomicons.jpg.masked"), dwFlags=0x2) returned 1 [0098.098] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ZoomIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\zoomiconsmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ZoomIconsMask.bmp.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\zoomiconsmask.bmp.masked"), dwFlags=0x2) returned 1 [0098.105] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x53907610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x8e19efe0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x8e19efe0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x10, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0098.113] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\IconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\welcome tool\\iconimages.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\IconImages.jpg.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\welcome tool\\iconimages.jpg.masked"), dwFlags=0x2) returned 1 [0098.120] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\IconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\welcome tool\\iconimagesmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\IconImagesMask.bmp.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\welcome tool\\iconimagesmask.bmp.masked"), dwFlags=0x2) returned 1 [0098.128] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52a4cdf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x8e1eb2a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x8e1eb2a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0098.136] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x8e1eb2a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x8e1eb2a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0098.138] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\Messenger.xml" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\messenger.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\Messenger.xml.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\messenger.xml.masked"), dwFlags=0x2) returned 1 [0098.144] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\Space Templates\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x8e211400, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x8e211400, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0098.249] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterApplicationDescriptors.xml" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\starterapplicationdescriptors.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterApplicationDescriptors.xml.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\starterapplicationdescriptors.xml.masked"), dwFlags=0x2) returned 1 [0098.369] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterNotificationDescriptors.xml" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\starternotificationdescriptors.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterNotificationDescriptors.xml.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\starternotificationdescriptors.xml.masked"), dwFlags=0x2) returned 1 [0098.478] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterToolTemplates.xml" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\startertooltemplates.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterToolTemplates.xml.masked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\startertooltemplates.xml.masked"), dwFlags=0x2) returned 1 [0098.485] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x544ee410, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x8e557240, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x8e557240, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0098.489] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x545acaf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x8e557240, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x8e557240, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0098.493] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x553a8c30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x8e557240, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x8e557240, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0098.991] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12\\Microsoft.Office.InfoPath.xml" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\infopathomformservices\\infopathomformservicesv12\\microsoft.office.infopath.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12\\Microsoft.Office.InfoPath.xml.masked" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\infopathomformservices\\infopathomformservicesv12\\microsoft.office.infopath.xml.masked"), dwFlags=0x2) returned 1 [0099.257] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\Microsoft.Office.InfoPath.xml" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\infopathomformservices\\microsoft.office.infopath.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\Microsoft.Office.InfoPath.xml.masked" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\infopathomformservices\\microsoft.office.infopath.xml.masked"), dwFlags=0x2) returned 1 [0099.264] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x544ee410, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x8ecc7700, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x8ecc7700, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0099.541] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12\\Microsoft.Office.InfoPath.xml" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\infopathomv12\\microsoft.office.infopath.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12\\Microsoft.Office.InfoPath.xml.masked" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\infopathomv12\\microsoft.office.infopath.xml.masked"), dwFlags=0x2) returned 1 [0099.826] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\Microsoft.Office.InfoPath.xml" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\microsoft.office.infopath.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\Microsoft.Office.InfoPath.xml.masked" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\microsoft.office.infopath.xml.masked"), dwFlags=0x2) returned 1 [0099.906] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\IPIRM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\ipirm.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\IPIRM.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\ipirm.xml.masked"), dwFlags=0x2) returned 1 [0099.985] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\IPIRMV.XML" (normalized: "c:\\program files\\microsoft office\\office14\\ipirmv.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\IPIRMV.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\ipirmv.xml.masked"), dwFlags=0x2) returned 1 [0100.007] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\JFONT.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\jfont.dat"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\JFONT.DAT.masked" (normalized: "c:\\program files\\microsoft office\\office14\\jfont.dat.masked"), dwFlags=0x2) returned 1 [0100.544] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\LATIN1.SHP" (normalized: "c:\\program files\\microsoft office\\office14\\latin1.shp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\LATIN1.SHP.masked" (normalized: "c:\\program files\\microsoft office\\office14\\latin1.shp.masked"), dwFlags=0x2) returned 1 [0100.554] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Library\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1887d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x8f8fa7c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x8f8fa7c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0100.558] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1887d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x8f920920, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x8f920920, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0100.712] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\ATPVBAEN.XLAM" (normalized: "c:\\program files\\microsoft office\\office14\\library\\analysis\\atpvbaen.xlam"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\ATPVBAEN.XLAM.masked" (normalized: "c:\\program files\\microsoft office\\office14\\library\\analysis\\atpvbaen.xlam.masked"), dwFlags=0x2) returned 1 [0100.748] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\FUNCRES.XLAM" (normalized: "c:\\program files\\microsoft office\\office14\\library\\analysis\\funcres.xlam"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\FUNCRES.XLAM.masked" (normalized: "c:\\program files\\microsoft office\\office14\\library\\analysis\\funcres.xlam.masked"), dwFlags=0x2) returned 1 [0100.803] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\PROCDB.XLAM" (normalized: "c:\\program files\\microsoft office\\office14\\library\\analysis\\procdb.xlam"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\PROCDB.XLAM.masked" (normalized: "c:\\program files\\microsoft office\\office14\\library\\analysis\\procdb.xlam.masked"), dwFlags=0x2) returned 1 [0101.526] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Library\\EUROTOOL.XLAM" (normalized: "c:\\program files\\microsoft office\\office14\\library\\eurotool.xlam"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Library\\EUROTOOL.XLAM.masked" (normalized: "c:\\program files\\microsoft office\\office14\\library\\eurotool.xlam.masked"), dwFlags=0x2) returned 1 [0101.531] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Library\\SOLVER\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1ae930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x90259e60, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x90259e60, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0102.094] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Library\\SOLVER\\SOLVER.XLAM" (normalized: "c:\\program files\\microsoft office\\office14\\library\\solver\\solver.xlam"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Library\\SOLVER\\SOLVER.XLAM.masked" (normalized: "c:\\program files\\microsoft office\\office14\\library\\solver\\solver.xlam.masked"), dwFlags=0x2) returned 1 [0102.248] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\LOOKUP.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\lookup.dat"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\LOOKUP.DAT.masked" (normalized: "c:\\program files\\microsoft office\\office14\\lookup.dat.masked"), dwFlags=0x2) returned 1 [0102.255] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\MEDIA\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x90931da0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x90931da0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0102.285] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\MEDIA\\APPLAUSE.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\applause.wav"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\MEDIA\\APPLAUSE.WAV.masked" (normalized: "c:\\program files\\microsoft office\\office14\\media\\applause.wav.masked"), dwFlags=0x2) returned 1 [0102.317] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\MEDIA\\ARROW.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\arrow.wav"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\MEDIA\\ARROW.WAV.masked" (normalized: "c:\\program files\\microsoft office\\office14\\media\\arrow.wav.masked"), dwFlags=0x2) returned 1 [0102.515] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\MEDIA\\BOMB.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\bomb.wav"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\MEDIA\\BOMB.WAV.masked" (normalized: "c:\\program files\\microsoft office\\office14\\media\\bomb.wav.masked"), dwFlags=0x2) returned 1 [0102.525] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\MEDIA\\BREEZE.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\breeze.wav"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\MEDIA\\BREEZE.WAV.masked" (normalized: "c:\\program files\\microsoft office\\office14\\media\\breeze.wav.masked"), dwFlags=0x2) returned 1 [0102.542] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\MEDIA\\CAMERA.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\camera.wav"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\MEDIA\\CAMERA.WAV.masked" (normalized: "c:\\program files\\microsoft office\\office14\\media\\camera.wav.masked"), dwFlags=0x2) returned 1 [0102.569] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\MEDIA\\CASHREG.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\cashreg.wav"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\MEDIA\\CASHREG.WAV.masked" (normalized: "c:\\program files\\microsoft office\\office14\\media\\cashreg.wav.masked"), dwFlags=0x2) returned 1 [0102.688] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\MEDIA\\CHIMES.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\chimes.wav"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\MEDIA\\CHIMES.WAV.masked" (normalized: "c:\\program files\\microsoft office\\office14\\media\\chimes.wav.masked"), dwFlags=0x2) returned 1 [0102.694] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\MEDIA\\CLICK.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\click.wav"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\MEDIA\\CLICK.WAV.masked" (normalized: "c:\\program files\\microsoft office\\office14\\media\\click.wav.masked"), dwFlags=0x2) returned 1 [0102.754] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\MEDIA\\COIN.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\coin.wav"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\MEDIA\\COIN.WAV.masked" (normalized: "c:\\program files\\microsoft office\\office14\\media\\coin.wav.masked"), dwFlags=0x2) returned 1 [0102.862] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\MEDIA\\DRUMROLL.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\drumroll.wav"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\MEDIA\\DRUMROLL.WAV.masked" (normalized: "c:\\program files\\microsoft office\\office14\\media\\drumroll.wav.masked"), dwFlags=0x2) returned 1 [0102.911] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\MEDIA\\EXPLODE.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\explode.wav"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\MEDIA\\EXPLODE.WAV.masked" (normalized: "c:\\program files\\microsoft office\\office14\\media\\explode.wav.masked"), dwFlags=0x2) returned 1 [0102.997] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\MEDIA\\HAMMER.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\hammer.wav"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\MEDIA\\HAMMER.WAV.masked" (normalized: "c:\\program files\\microsoft office\\office14\\media\\hammer.wav.masked"), dwFlags=0x2) returned 1 [0103.003] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\MEDIA\\LASER.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\laser.wav"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\MEDIA\\LASER.WAV.masked" (normalized: "c:\\program files\\microsoft office\\office14\\media\\laser.wav.masked"), dwFlags=0x2) returned 1 [0103.086] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\MEDIA\\PUSH.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\push.wav"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\MEDIA\\PUSH.WAV.masked" (normalized: "c:\\program files\\microsoft office\\office14\\media\\push.wav.masked"), dwFlags=0x2) returned 1 [0103.169] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\MEDIA\\SUCTION.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\suction.wav"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\MEDIA\\SUCTION.WAV.masked" (normalized: "c:\\program files\\microsoft office\\office14\\media\\suction.wav.masked"), dwFlags=0x2) returned 1 [0103.241] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\MEDIA\\TYPE.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\type.wav"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\MEDIA\\TYPE.WAV.masked" (normalized: "c:\\program files\\microsoft office\\office14\\media\\type.wav.masked"), dwFlags=0x2) returned 1 [0103.334] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\MEDIA\\VOLTAGE.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\voltage.wav"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\MEDIA\\VOLTAGE.WAV.masked" (normalized: "c:\\program files\\microsoft office\\office14\\media\\voltage.wav.masked"), dwFlags=0x2) returned 1 [0103.358] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\MEDIA\\WHOOSH.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\whoosh.wav"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\MEDIA\\WHOOSH.WAV.masked" (normalized: "c:\\program files\\microsoft office\\office14\\media\\whoosh.wav.masked"), dwFlags=0x2) returned 1 [0103.374] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\MEDIA\\WIND.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\wind.wav"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\MEDIA\\WIND.WAV.masked" (normalized: "c:\\program files\\microsoft office\\office14\\media\\wind.wav.masked"), dwFlags=0x2) returned 1 [0103.765] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Microsoft.BusinessData.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.businessdata.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Microsoft.BusinessData.xml.masked" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.businessdata.xml.masked"), dwFlags=0x2) returned 1 [0103.802] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessApplications.Runtime.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.businessapplications.runtime.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessApplications.Runtime.xml.masked" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.businessapplications.runtime.xml.masked"), dwFlags=0x2) returned 1 [0103.807] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessApplications.RuntimeUi.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.businessapplications.runtimeui.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessApplications.RuntimeUi.xml.masked" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.businessapplications.runtimeui.xml.masked"), dwFlags=0x2) returned 1 [0104.034] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessData.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.businessdata.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessData.xml.masked" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.businessdata.xml.masked"), dwFlags=0x2) returned 1 [0104.780] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.Interop.InfoPath.SemiTrust.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.interop.infopath.semitrust.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.Interop.InfoPath.SemiTrust.xml.masked" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.interop.infopath.semitrust.xml.masked"), dwFlags=0x2) returned 1 [0105.307] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.Interop.InfoPath.Xml.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.interop.infopath.xml.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.Interop.InfoPath.Xml.xml.masked" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.interop.infopath.xml.xml.masked"), dwFlags=0x2) returned 1 [0105.515] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Microsoft.SharePoint.BusinessData.Administration.Client.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.sharepoint.businessdata.administration.client.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Microsoft.SharePoint.BusinessData.Administration.Client.xml.masked" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.sharepoint.businessdata.administration.client.xml.masked"), dwFlags=0x2) returned 1 [0106.048] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\MSACC.OLB" (normalized: "c:\\program files\\microsoft office\\office14\\msacc.olb"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\MSACC.OLB.masked" (normalized: "c:\\program files\\microsoft office\\office14\\msacc.olb.masked"), dwFlags=0x2) returned 1 [0106.514] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\MSOUTL.OLB" (normalized: "c:\\program files\\microsoft office\\office14\\msoutl.olb"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\MSOUTL.OLB.masked" (normalized: "c:\\program files\\microsoft office\\office14\\msoutl.olb.masked"), dwFlags=0x2) returned 1 [0107.077] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\MSPPT.OLB" (normalized: "c:\\program files\\microsoft office\\office14\\msppt.olb"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\MSPPT.OLB.masked" (normalized: "c:\\program files\\microsoft office\\office14\\msppt.olb.masked"), dwFlags=0x2) returned 1 [0107.942] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\MSPRJ.OLB" (normalized: "c:\\program files\\microsoft office\\office14\\msprj.olb"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\MSPRJ.OLB.masked" (normalized: "c:\\program files\\microsoft office\\office14\\msprj.olb.masked"), dwFlags=0x2) returned 1 [0108.485] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\MSWORD.OLB" (normalized: "c:\\program files\\microsoft office\\office14\\msword.olb"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\MSWORD.OLB.masked" (normalized: "c:\\program files\\microsoft office\\office14\\msword.olb.masked"), dwFlags=0x2) returned 1 [0108.604] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OCRHC.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\ocrhc.dat"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OCRHC.DAT.masked" (normalized: "c:\\program files\\microsoft office\\office14\\ocrhc.dat.masked"), dwFlags=0x2) returned 1 [0108.654] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OCRVC.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\ocrvc.dat"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OCRVC.DAT.masked" (normalized: "c:\\program files\\microsoft office\\office14\\ocrvc.dat.masked"), dwFlags=0x2) returned 1 [0108.773] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OLKIRM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\olkirm.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OLKIRM.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\olkirm.xml.masked"), dwFlags=0x2) returned 1 [0108.887] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OLKIRMV.XML" (normalized: "c:\\program files\\microsoft office\\office14\\olkirmv.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OLKIRMV.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\olkirmv.xml.masked"), dwFlags=0x2) returned 1 [0108.893] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OneNote\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x94892760, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x94892760, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0108.896] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNote-PipelineConfig.xml" (normalized: "c:\\program files\\microsoft office\\office14\\onenote\\sendtoonenote-pipelineconfig.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNote-PipelineConfig.xml.masked" (normalized: "c:\\program files\\microsoft office\\office14\\onenote\\sendtoonenote-pipelineconfig.xml.masked"), dwFlags=0x2) returned 1 [0109.053] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\ONENOTEIRM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\onenoteirm.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\ONENOTEIRM.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\onenoteirm.xml.masked"), dwFlags=0x2) returned 1 [0109.129] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OSPP.VBS" (normalized: "c:\\program files\\microsoft office\\office14\\ospp.vbs"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OSPP.VBS.masked" (normalized: "c:\\program files\\microsoft office\\office14\\ospp.vbs.masked"), dwFlags=0x2) returned 1 [0109.769] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OUTLFLTR.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\outlfltr.dat"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OUTLFLTR.DAT.masked" (normalized: "c:\\program files\\microsoft office\\office14\\outlfltr.dat.masked"), dwFlags=0x2) returned 1 [0109.775] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5133d8d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x950e7460, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x950e7460, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0109.780] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\AMERITECH.NET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\ameritech.net.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\AMERITECH.NET.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\ameritech.net.xml.masked"), dwFlags=0x2) returned 1 [0109.786] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\BTINTERNET.NET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\btinternet.net.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\BTINTERNET.NET.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\btinternet.net.xml.masked"), dwFlags=0x2) returned 1 [0109.791] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\BTOPENWORLD.COM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\btopenworld.com.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\BTOPENWORLD.COM.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\btopenworld.com.xml.masked"), dwFlags=0x2) returned 1 [0109.799] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\FLASH.NET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\flash.net.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\FLASH.NET.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\flash.net.xml.masked"), dwFlags=0x2) returned 1 [0109.898] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\NL.ROGERS.COM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\nl.rogers.com.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\NL.ROGERS.COM.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\nl.rogers.com.xml.masked"), dwFlags=0x2) returned 1 [0109.902] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\NVBELL.NET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\nvbell.net.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\NVBELL.NET.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\nvbell.net.xml.masked"), dwFlags=0x2) returned 1 [0109.951] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\PACBELL.NET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\pacbell.net.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\PACBELL.NET.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\pacbell.net.xml.masked"), dwFlags=0x2) returned 1 [0109.956] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\PRODIGY.NET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\prodigy.net.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\PRODIGY.NET.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\prodigy.net.xml.masked"), dwFlags=0x2) returned 1 [0109.959] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\ROGERS.COM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\rogers.com.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\ROGERS.COM.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\rogers.com.xml.masked"), dwFlags=0x2) returned 1 [0109.967] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\SBCGLOBAL.NET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\sbcglobal.net.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\SBCGLOBAL.NET.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\sbcglobal.net.xml.masked"), dwFlags=0x2) returned 1 [0109.973] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\SNET.NET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\snet.net.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\SNET.NET.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\snet.net.xml.masked"), dwFlags=0x2) returned 1 [0109.977] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\SWBELL.NET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\swbell.net.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\SWBELL.NET.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\swbell.net.xml.masked"), dwFlags=0x2) returned 1 [0109.980] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\TALK21.COM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\talk21.com.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\TALK21.COM.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\talk21.com.xml.masked"), dwFlags=0x2) returned 1 [0109.984] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\WANS.NET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\wans.net.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\WANS.NET.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\wans.net.xml.masked"), dwFlags=0x2) returned 1 [0109.990] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CA.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.ca.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CA.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.ca.xml.masked"), dwFlags=0x2) returned 1 [0109.994] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.ID.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.id.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.ID.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.id.xml.masked"), dwFlags=0x2) returned 1 [0109.999] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.IN.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.in.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.IN.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.in.xml.masked"), dwFlags=0x2) returned 1 [0110.006] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.JP.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.jp.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.JP.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.jp.xml.masked"), dwFlags=0x2) returned 1 [0110.010] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.KR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.kr.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.KR.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.kr.xml.masked"), dwFlags=0x2) returned 1 [0110.016] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.NZ.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.nz.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.NZ.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.nz.xml.masked"), dwFlags=0x2) returned 1 [0110.053] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.TH.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.th.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.TH.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.th.xml.masked"), dwFlags=0x2) returned 1 [0110.057] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.UK.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.uk.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.UK.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.uk.xml.masked"), dwFlags=0x2) returned 1 [0110.064] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.AR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.ar.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.AR.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.ar.xml.masked"), dwFlags=0x2) returned 1 [0110.067] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.AU.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.au.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.AU.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.au.xml.masked"), dwFlags=0x2) returned 1 [0110.071] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.BR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.br.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.BR.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.br.xml.masked"), dwFlags=0x2) returned 1 [0110.106] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.CN.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.cn.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.CN.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.cn.xml.masked"), dwFlags=0x2) returned 1 [0110.112] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.HK.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.hk.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.HK.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.hk.xml.masked"), dwFlags=0x2) returned 1 [0110.115] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.MX.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.mx.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.MX.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.mx.xml.masked"), dwFlags=0x2) returned 1 [0110.157] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.MY.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.my.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.MY.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.my.xml.masked"), dwFlags=0x2) returned 1 [0110.161] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.PH.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.ph.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.PH.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.ph.xml.masked"), dwFlags=0x2) returned 1 [0110.165] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.SG.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.sg.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.SG.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.sg.xml.masked"), dwFlags=0x2) returned 1 [0110.168] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.TW.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.tw.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.TW.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.tw.xml.masked"), dwFlags=0x2) returned 1 [0110.172] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.VN.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.vn.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.VN.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.vn.xml.masked"), dwFlags=0x2) returned 1 [0110.211] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.xml.masked"), dwFlags=0x2) returned 1 [0110.216] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.DE.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.de.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.DE.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.de.xml.masked"), dwFlags=0x2) returned 1 [0110.220] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.ES.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.es.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.ES.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.es.xml.masked"), dwFlags=0x2) returned 1 [0110.223] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.FR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.fr.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.FR.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.fr.xml.masked"), dwFlags=0x2) returned 1 [0110.227] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.HK.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.hk.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.HK.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.hk.xml.masked"), dwFlags=0x2) returned 1 [0110.244] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.IE.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.ie.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.IE.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.ie.xml.masked"), dwFlags=0x2) returned 1 [0110.247] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.IT.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.it.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.IT.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.it.xml.masked"), dwFlags=0x2) returned 1 [0110.251] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.JP.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.jp.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.JP.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.jp.xml.masked"), dwFlags=0x2) returned 1 [0110.254] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.NO.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.no.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.NO.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.no.xml.masked"), dwFlags=0x2) returned 1 [0110.258] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.PL.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.pl.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.PL.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.pl.xml.masked"), dwFlags=0x2) returned 1 [0110.262] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.SE.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.se.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.SE.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.se.xml.masked"), dwFlags=0x2) returned 1 [0110.268] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59d27370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x955aa060, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x955aa060, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0110.274] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL001.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl001.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL001.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl001.xml.masked"), dwFlags=0x2) returned 1 [0110.864] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL002.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl002.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL002.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl002.xml.masked"), dwFlags=0x2) returned 1 [0111.091] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL010.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl010.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL010.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl010.xml.masked"), dwFlags=0x2) returned 1 [0111.100] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL011.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl011.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL011.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl011.xml.masked"), dwFlags=0x2) returned 1 [0111.619] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL012.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl012.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL012.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl012.xml.masked"), dwFlags=0x2) returned 1 [0111.763] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL016.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl016.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL016.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl016.xml.masked"), dwFlags=0x2) returned 1 [0111.832] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL020.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl020.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL020.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl020.xml.masked"), dwFlags=0x2) returned 1 [0111.997] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL022.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl022.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL022.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl022.xml.masked"), dwFlags=0x2) returned 1 [0112.125] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL026.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl026.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL026.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl026.xml.masked"), dwFlags=0x2) returned 1 [0112.157] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL027.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl027.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL027.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl027.xml.masked"), dwFlags=0x2) returned 1 [0112.319] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL044.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl044.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL044.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl044.xml.masked"), dwFlags=0x2) returned 1 [0112.878] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL048.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl048.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL048.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl048.xml.masked"), dwFlags=0x2) returned 1 [0113.272] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL054.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl054.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL054.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl054.xml.masked"), dwFlags=0x2) returned 1 [0113.446] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL058.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl058.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL058.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl058.xml.masked"), dwFlags=0x2) returned 1 [0113.538] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL065.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl065.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL065.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl065.xml.masked"), dwFlags=0x2) returned 1 [0114.066] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL075.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl075.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL075.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl075.xml.masked"), dwFlags=0x2) returned 1 [0114.094] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL077.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl077.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL077.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl077.xml.masked"), dwFlags=0x2) returned 1 [0114.110] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL078.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl078.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL078.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl078.xml.masked"), dwFlags=0x2) returned 1 [0114.667] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL081.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl081.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL081.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl081.xml.masked"), dwFlags=0x2) returned 1 [0114.929] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL082.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl082.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL082.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl082.xml.masked"), dwFlags=0x2) returned 1 [0114.968] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL083.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl083.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL083.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl083.xml.masked"), dwFlags=0x2) returned 1 [0115.557] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL086.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl086.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL086.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl086.xml.masked"), dwFlags=0x2) returned 1 [0115.577] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL087.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl087.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL087.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl087.xml.masked"), dwFlags=0x2) returned 1 [0115.708] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL089.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl089.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL089.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl089.xml.masked"), dwFlags=0x2) returned 1 [0115.860] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL090.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl090.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL090.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl090.xml.masked"), dwFlags=0x2) returned 1 [0116.143] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL092.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl092.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL092.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl092.xml.masked"), dwFlags=0x2) returned 1 [0116.236] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL093.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl093.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL093.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl093.xml.masked"), dwFlags=0x2) returned 1 [0116.466] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL095.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl095.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL095.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl095.xml.masked"), dwFlags=0x2) returned 1 [0116.732] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL096.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl096.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL096.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl096.xml.masked"), dwFlags=0x2) returned 1 [0116.768] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL097.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl097.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL097.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl097.xml.masked"), dwFlags=0x2) returned 1 [0116.828] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL102.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl102.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL102.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl102.xml.masked"), dwFlags=0x2) returned 1 [0117.060] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL103.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl103.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL103.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl103.xml.masked"), dwFlags=0x2) returned 1 [0117.249] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL104.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl104.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL104.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl104.xml.masked"), dwFlags=0x2) returned 1 [0117.358] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL105.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl105.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL105.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl105.xml.masked"), dwFlags=0x2) returned 1 [0117.551] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL106.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl106.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL106.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl106.xml.masked"), dwFlags=0x2) returned 1 [0117.669] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL107.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl107.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL107.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl107.xml.masked"), dwFlags=0x2) returned 1 [0117.966] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL108.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl108.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL108.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl108.xml.masked"), dwFlags=0x2) returned 1 [0118.097] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL109.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl109.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL109.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl109.xml.masked"), dwFlags=0x2) returned 1 [0118.840] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL110.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl110.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL110.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl110.xml.masked"), dwFlags=0x2) returned 1 [0119.200] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL111.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl111.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL111.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl111.xml.masked"), dwFlags=0x2) returned 1 [0119.604] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN001.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn001.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN001.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn001.xml.masked"), dwFlags=0x2) returned 1 [0119.691] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN002.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn002.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN002.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn002.xml.masked"), dwFlags=0x2) returned 1 [0119.706] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN010.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn010.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN010.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn010.xml.masked"), dwFlags=0x2) returned 1 [0119.767] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN011.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn011.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN011.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn011.xml.masked"), dwFlags=0x2) returned 1 [0119.782] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN020.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn020.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN020.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn020.xml.masked"), dwFlags=0x2) returned 1 [0119.875] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN022.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn022.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN022.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn022.xml.masked"), dwFlags=0x2) returned 1 [0119.900] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN026.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn026.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN026.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn026.xml.masked"), dwFlags=0x2) returned 1 [0119.905] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN027.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn027.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN027.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn027.xml.masked"), dwFlags=0x2) returned 1 [0119.913] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN044.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn044.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN044.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn044.xml.masked"), dwFlags=0x2) returned 1 [0120.451] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN048.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn048.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN048.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn048.xml.masked"), dwFlags=0x2) returned 1 [0120.490] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN054.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn054.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN054.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn054.xml.masked"), dwFlags=0x2) returned 1 [0120.519] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN058.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn058.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN058.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn058.xml.masked"), dwFlags=0x2) returned 1 [0120.529] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN065.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn065.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN065.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn065.xml.masked"), dwFlags=0x2) returned 1 [0120.620] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN075.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn075.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN075.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn075.xml.masked"), dwFlags=0x2) returned 1 [0121.183] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN081.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn081.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN081.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn081.xml.masked"), dwFlags=0x2) returned 1 [0121.409] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN082.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn082.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN082.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn082.xml.masked"), dwFlags=0x2) returned 1 [0121.426] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN086.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn086.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN086.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn086.xml.masked"), dwFlags=0x2) returned 1 [0121.434] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN089.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn089.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN089.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn089.xml.masked"), dwFlags=0x2) returned 1 [0121.485] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN090.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn090.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN090.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn090.xml.masked"), dwFlags=0x2) returned 1 [0121.560] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN092.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn092.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN092.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn092.xml.masked"), dwFlags=0x2) returned 1 [0121.569] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN095.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn095.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN095.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn095.xml.masked"), dwFlags=0x2) returned 1 [0121.601] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN096.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn096.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN096.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn096.xml.masked"), dwFlags=0x2) returned 1 [0121.695] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN097.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn097.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN097.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn097.xml.masked"), dwFlags=0x2) returned 1 [0121.750] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN102.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn102.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN102.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn102.xml.masked"), dwFlags=0x2) returned 1 [0121.809] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN103.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn103.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN103.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn103.xml.masked"), dwFlags=0x2) returned 1 [0121.829] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN105.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn105.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN105.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn105.xml.masked"), dwFlags=0x2) returned 1 [0121.852] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN107.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn107.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN107.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn107.xml.masked"), dwFlags=0x2) returned 1 [0121.869] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN108.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn108.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN108.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn108.xml.masked"), dwFlags=0x2) returned 1 [0121.898] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN109.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn109.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN109.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn109.xml.masked"), dwFlags=0x2) returned 1 [0121.958] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN110.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn110.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN110.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn110.xml.masked"), dwFlags=0x2) returned 1 [0122.276] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN111.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn111.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN111.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn111.xml.masked"), dwFlags=0x2) returned 1 [0122.322] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PG_INDEX.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pg_index.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PG_INDEX.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pg_index.xml.masked"), dwFlags=0x2) returned 1 [0122.405] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PPTIRM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pptirm.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PPTIRM.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pptirm.xml.masked"), dwFlags=0x2) returned 1 [0122.421] GetFileType (hFile=0x6c) returned 0x1 [0122.504] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PPTIRMV.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pptirmv.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PPTIRMV.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pptirmv.xml.masked"), dwFlags=0x2) returned 1 [0122.523] GetFileType (hFile=0x6c) returned 0x1 [0122.525] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PROOF\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5481df0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x9ca99920, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x9ca99920, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0122.554] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PROOF\\1033\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97285f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x9cae5be0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x9cae5be0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0122.557] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PROOF\\1036\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa44929a0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x9cae5be0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x9cae5be0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0122.559] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PROOF\\3082\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54ce0b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x9cae5be0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x9cae5be0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0122.571] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBBA\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59413f90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x9cb0bd40, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x9cb0bd40, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0122.575] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x511e6c70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x9cb0bd40, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x9cb0bd40, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0122.579] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\AD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\ad.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\AD.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\ad.xml.masked"), dwFlags=0x2) returned 1 [0122.592] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BANNER.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\banner.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BANNER.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\banner.xml.masked"), dwFlags=0x2) returned 1 [0122.609] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BIZCARD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bizcard.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BIZCARD.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bizcard.xml.masked"), dwFlags=0x2) returned 1 [0122.680] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BIZFORM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bizform.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BIZFORM.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bizform.xml.masked"), dwFlags=0x2) returned 1 [0122.713] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BROCHURE.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\brochure.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BROCHURE.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\brochure.xml.masked"), dwFlags=0x2) returned 1 [0122.728] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALENDAR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\calendar.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALENDAR.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\calendar.xml.masked"), dwFlags=0x2) returned 1 [0122.741] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CATALOG.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\catalog.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CATALOG.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\catalog.xml.masked"), dwFlags=0x2) returned 1 [0122.752] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CERT.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\cert.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CERT.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\cert.xml.masked"), dwFlags=0x2) returned 1 [0122.758] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGACCBAR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgaccbar.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGACCBAR.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgaccbar.xml.masked"), dwFlags=0x2) returned 1 [0122.765] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGACCBOX.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgaccbox.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGACCBOX.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgaccbox.xml.masked"), dwFlags=0x2) returned 1 [0122.770] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGAD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgad.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGAD.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgad.xml.masked"), dwFlags=0x2) returned 1 [0122.779] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGATNGET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgatnget.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGATNGET.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgatnget.xml.masked"), dwFlags=0x2) returned 1 [0122.783] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBARBLL.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgbarbll.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBARBLL.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgbarbll.xml.masked"), dwFlags=0x2) returned 1 [0122.789] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBORDER.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgborder.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBORDER.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgborder.xml.masked"), dwFlags=0x2) returned 1 [0122.793] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBOXES.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgboxes.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBOXES.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgboxes.xml.masked"), dwFlags=0x2) returned 1 [0122.804] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCAL.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgcal.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCAL.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgcal.xml.masked"), dwFlags=0x2) returned 1 [0122.809] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCHKBRD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgchkbrd.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCHKBRD.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgchkbrd.xml.masked"), dwFlags=0x2) returned 1 [0122.814] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCINFO.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgcinfo.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCINFO.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgcinfo.xml.masked"), dwFlags=0x2) returned 1 [0122.817] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCOUPON.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgcoupon.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCOUPON.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgcoupon.xml.masked"), dwFlags=0x2) returned 1 [0122.821] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGDOTS.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgdots.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGDOTS.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgdots.xml.masked"), dwFlags=0x2) returned 1 [0122.832] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGHEADING.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgheading.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGHEADING.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgheading.xml.masked"), dwFlags=0x2) returned 1 [0122.836] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGLINACC.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dglinacc.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGLINACC.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dglinacc.xml.masked"), dwFlags=0x2) returned 1 [0122.841] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGLOGO.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dglogo.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGLOGO.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dglogo.xml.masked"), dwFlags=0x2) returned 1 [0122.848] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGMAIN.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgmain.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGMAIN.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgmain.xml.masked"), dwFlags=0x2) returned 1 [0122.853] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGMARQ.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgmarq.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGMARQ.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgmarq.xml.masked"), dwFlags=0x2) returned 1 [0122.861] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGNAVBAR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgnavbar.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGNAVBAR.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgnavbar.xml.masked"), dwFlags=0x2) returned 1 [0122.873] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPICCAP.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgpiccap.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPICCAP.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgpiccap.xml.masked"), dwFlags=0x2) returned 1 [0122.884] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPQUOT.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgpquot.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPQUOT.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgpquot.xml.masked"), dwFlags=0x2) returned 1 [0122.889] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPUNCT.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgpunct.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPUNCT.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgpunct.xml.masked"), dwFlags=0x2) returned 1 [0122.894] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGREPFRM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgrepfrm.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGREPFRM.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgrepfrm.xml.masked"), dwFlags=0x2) returned 1 [0122.905] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSIDEBR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgsidebr.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSIDEBR.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgsidebr.xml.masked"), dwFlags=0x2) returned 1 [0122.912] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSIDEBRV.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgsidebrv.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSIDEBRV.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgsidebrv.xml.masked"), dwFlags=0x2) returned 1 [0122.918] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSTORY.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgstory.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSTORY.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgstory.xml.masked"), dwFlags=0x2) returned 1 [0122.924] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSTORYVERT.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgstoryvert.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSTORYVERT.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgstoryvert.xml.masked"), dwFlags=0x2) returned 1 [0122.935] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGTOC.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgtoc.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGTOC.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgtoc.xml.masked"), dwFlags=0x2) returned 1 [0122.940] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBAD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebad.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBAD.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebad.xml.masked"), dwFlags=0x2) returned 1 [0122.952] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBBTN.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebbtn.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBBTN.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebbtn.xml.masked"), dwFlags=0x2) returned 1 [0122.964] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBCAL.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebcal.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBCAL.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebcal.xml.masked"), dwFlags=0x2) returned 1 [0122.975] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBHD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebhd.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBHD.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebhd.xml.masked"), dwFlags=0x2) returned 1 [0122.981] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBPQT.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebpqt.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBPQT.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebpqt.xml.masked"), dwFlags=0x2) returned 1 [0122.984] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBREF.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebref.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBREF.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebref.xml.masked"), dwFlags=0x2) returned 1 [0122.990] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBSBR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebsbr.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBSBR.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebsbr.xml.masked"), dwFlags=0x2) returned 1 [0122.993] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGZIPC.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgzipc.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGZIPC.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgzipc.xml.masked"), dwFlags=0x2) returned 1 [0123.050] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\EMAIL.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\email.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\EMAIL.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\email.xml.masked"), dwFlags=0x2) returned 1 [0123.067] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENVELOPE.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\envelope.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENVELOPE.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\envelope.xml.masked"), dwFlags=0x2) returned 1 [0123.163] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLYER.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\flyer.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLYER.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\flyer.xml.masked"), dwFlags=0x2) returned 1 [0123.170] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FOLDPROJ.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\foldproj.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FOLDPROJ.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\foldproj.xml.masked"), dwFlags=0x2) returned 1 [0123.180] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GIFT.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\gift.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GIFT.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\gift.xml.masked"), dwFlags=0x2) returned 1 [0123.248] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GREETING.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\greeting.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GREETING.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\greeting.xml.masked"), dwFlags=0x2) returned 1 [0123.272] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\INVITE.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\invite.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\INVITE.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\invite.xml.masked"), dwFlags=0x2) returned 1 [0123.294] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LABEL.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\label.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LABEL.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\label.xml.masked"), dwFlags=0x2) returned 1 [0123.318] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LETTHEAD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\letthead.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LETTHEAD.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\letthead.xml.masked"), dwFlags=0x2) returned 1 [0123.332] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MAIN.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\main.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MAIN.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\main.xml.masked"), dwFlags=0x2) returned 1 [0123.345] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MENU.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\menu.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MENU.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\menu.xml.masked"), dwFlags=0x2) returned 1 [0123.367] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NEWS.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\news.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NEWS.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\news.xml.masked"), dwFlags=0x2) returned 1 [0123.409] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\POSTCARD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\postcard.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\POSTCARD.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\postcard.xml.masked"), dwFlags=0x2) returned 1 [0123.413] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PROGRAM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\program.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PROGRAM.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\program.xml.masked"), dwFlags=0x2) returned 1 [0123.431] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\QP.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\qp.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\QP.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\qp.xml.masked"), dwFlags=0x2) returned 1 [0123.437] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\RESUME.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\resume.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\RESUME.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\resume.xml.masked"), dwFlags=0x2) returned 1 [0123.452] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIGN.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\sign.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIGN.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\sign.xml.masked"), dwFlags=0x2) returned 1 [0123.472] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBPAGE.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\webpage.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBPAGE.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\webpage.xml.masked"), dwFlags=0x2) returned 1 [0123.498] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WITHCOMP.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\withcomp.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WITHCOMP.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\withcomp.xml.masked"), dwFlags=0x2) returned 1 [0123.510] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WORDREP.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\wordrep.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WORDREP.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\wordrep.xml.masked"), dwFlags=0x2) returned 1 [0123.515] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\QUERIES\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa5ff110, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x9d3f8fc0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x9d3f8fc0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0123.622] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\REMINDER.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\reminder.wav"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\REMINDER.WAV.masked" (normalized: "c:\\program files\\microsoft office\\office14\\reminder.wav.masked"), dwFlags=0x2) returned 1 [0123.628] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\SAMPLES\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa671530, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x9d503960, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x9d503960, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0123.743] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\SAMPLES\\SOLVSAMP.XLS" (normalized: "c:\\program files\\microsoft office\\office14\\samples\\solvsamp.xls"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\SAMPLES\\SOLVSAMP.XLS.masked" (normalized: "c:\\program files\\microsoft office\\office14\\samples\\solvsamp.xls.masked"), dwFlags=0x2) returned 1 [0123.751] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\SketchPadTestSchema.xml" (normalized: "c:\\program files\\microsoft office\\office14\\sketchpadtestschema.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\SketchPadTestSchema.xml.masked" (normalized: "c:\\program files\\microsoft office\\office14\\sketchpadtestschema.xml.masked"), dwFlags=0x2) returned 1 [0123.786] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\SLERROR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\slerror.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\SLERROR.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\slerror.xml.masked"), dwFlags=0x2) returned 1 [0123.880] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\SplashScreen.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\splashscreen.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\SplashScreen.bmp.masked" (normalized: "c:\\program files\\microsoft office\\office14\\splashscreen.bmp.masked"), dwFlags=0x2) returned 1 [0123.886] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\STARTUP\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x9d78b0c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x9d78b0c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0123.891] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Visio Content\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x504da6a0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x9d78b0c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x9d78b0c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0123.897] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x504da6a0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x9d7b1220, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x9d7b1220, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0123.919] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ASTMGT.XLS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\astmgt.xls"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ASTMGT.XLS.masked" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\astmgt.xls.masked"), dwFlags=0x2) returned 1 [0124.470] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLDGPLAN.DWG" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bldgplan.dwg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLDGPLAN.DWG.masked" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bldgplan.dwg.masked"), dwFlags=0x2) returned 1 [0124.538] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLDGPLAN.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bldgplan.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLDGPLAN.JPG.masked" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bldgplan.jpg.masked"), dwFlags=0x2) returned 1 [0124.586] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLNKDG_M.VSD" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\blnkdg_m.vsd"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLNKDG_M.VSD.masked" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\blnkdg_m.vsd.masked"), dwFlags=0x2) returned 1 [0124.613] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLNKDG_U.VSD" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\blnkdg_u.vsd"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLNKDG_U.VSD.masked" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\blnkdg_u.vsd.masked"), dwFlags=0x2) returned 1 [0124.688] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCKS.DWG" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\blocks.dwg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCKS.DWG.masked" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\blocks.dwg.masked"), dwFlags=0x2) returned 1 [0124.696] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BRAINSTM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\brainstm.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BRAINSTM.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\brainstm.xml.masked"), dwFlags=0x2) returned 1 [0124.715] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGDATA.TXT" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\orgdata.txt"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGDATA.TXT.masked" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\orgdata.txt.masked"), dwFlags=0x2) returned 1 [0124.745] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGDATA.XLS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\orgdata.xls"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGDATA.XLS.masked" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\orgdata.xls.masked"), dwFlags=0x2) returned 1 [0124.768] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRCIMP.XLS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\prcimp.xls"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRCIMP.XLS.masked" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\prcimp.xls.masked"), dwFlags=0x2) returned 1 [0124.795] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRJMGT.XLS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\prjmgt.xls"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRJMGT.XLS.masked" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\prjmgt.xls.masked"), dwFlags=0x2) returned 1 [0124.816] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PROJTL.XLS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\projtl.xls"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PROJTL.XLS.masked" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\projtl.xls.masked"), dwFlags=0x2) returned 1 [0124.846] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SALSUM.XLS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\salsum.xls"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SALSUM.XLS.masked" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\salsum.xls.masked"), dwFlags=0x2) returned 1 [0124.918] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLDG_M.VSD" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umldg_m.vsd"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLDG_M.VSD.masked" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umldg_m.vsd.masked"), dwFlags=0x2) returned 1 [0124.979] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLDG_U.VSD" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umldg_u.vsd"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLDG_U.VSD.masked" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umldg_u.vsd.masked"), dwFlags=0x2) returned 1 [0125.063] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\WORDIRM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\wordirm.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\WORDIRM.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\wordirm.xml.masked"), dwFlags=0x2) returned 1 [0125.153] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\WORDIRMV.XML" (normalized: "c:\\program files\\microsoft office\\office14\\wordirmv.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\WORDIRMV.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\wordirmv.xml.masked"), dwFlags=0x2) returned 1 [0125.238] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\XLCPRTID.XML" (normalized: "c:\\program files\\microsoft office\\office14\\xlcprtid.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\XLCPRTID.XML.masked" (normalized: "c:\\program files\\microsoft office\\office14\\xlcprtid.xml.masked"), dwFlags=0x2) returned 1 [0125.243] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\XLSTART\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x9e47c860, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x9e47c860, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0125.250] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Stationery\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd3eb50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x9e47c860, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x9e47c860, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555ce0 [0125.255] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Stationery\\1033\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xebb910, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x9e4a29c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x9e4a29c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0125.264] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Stationery\\1033\\CURRENCY.GIF" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\currency.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Stationery\\1033\\CURRENCY.GIF.masked" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\currency.gif.masked"), dwFlags=0x2) returned 1 [0125.268] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Stationery\\1033\\DADSHIRT.GIF" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\dadshirt.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Stationery\\1033\\DADSHIRT.GIF.masked" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\dadshirt.gif.masked"), dwFlags=0x2) returned 1 [0125.274] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Stationery\\1033\\JUDGESCH.GIF" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\judgesch.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Stationery\\1033\\JUDGESCH.GIF.masked" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\judgesch.gif.masked"), dwFlags=0x2) returned 1 [0125.282] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Stationery\\1033\\JUNGLE.GIF" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\jungle.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Stationery\\1033\\JUNGLE.GIF.masked" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\jungle.gif.masked"), dwFlags=0x2) returned 1 [0125.287] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Stationery\\1033\\NOTEBOOK.JPG" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\notebook.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Stationery\\1033\\NOTEBOOK.JPG.masked" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\notebook.jpg.masked"), dwFlags=0x2) returned 1 [0125.304] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Stationery\\1033\\OFFISUPP.GIF" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\offisupp.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Stationery\\1033\\OFFISUPP.GIF.masked" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\offisupp.gif.masked"), dwFlags=0x2) returned 1 [0125.309] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Stationery\\1033\\PAWPRINT.GIF" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\pawprint.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Stationery\\1033\\PAWPRINT.GIF.masked" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\pawprint.gif.masked"), dwFlags=0x2) returned 1 [0125.316] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Stationery\\1033\\PINELUMB.JPG" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\pinelumb.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Stationery\\1033\\PINELUMB.JPG.masked" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\pinelumb.jpg.masked"), dwFlags=0x2) returned 1 [0125.326] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Stationery\\1033\\SEAMARBL.JPG" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\seamarbl.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Stationery\\1033\\SEAMARBL.JPG.masked" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\seamarbl.jpg.masked"), dwFlags=0x2) returned 1 [0125.331] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Stationery\\1033\\TECHTOOL.GIF" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\techtool.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Stationery\\1033\\TECHTOOL.GIF.masked" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\techtool.gif.masked"), dwFlags=0x2) returned 1 [0125.337] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf59f9270, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x9e5610a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x9e5610a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555ce0 [0125.343] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf59f9270, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x9e5610a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x9e5610a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0125.350] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14ebe6b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x9e587200, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x9e587200, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0125.880] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Assets.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\assets.accdt"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Assets.accdt.masked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\assets.accdt.masked"), dwFlags=0x2) returned 1 [0126.456] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Charitable Contributions.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\charitable contributions.accdt"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Charitable Contributions.accdt.masked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\charitable contributions.accdt.masked"), dwFlags=0x2) returned 1 [0127.211] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Contacts.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\contacts.accdt"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Contacts.accdt.masked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\contacts.accdt.masked"), dwFlags=0x2) returned 1 [0127.219] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14f30ad0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x9f761700, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x9f761700, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0127.444] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Events.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\events.accdt"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Events.accdt.masked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\events.accdt.masked"), dwFlags=0x2) returned 1 [0128.186] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Faculty.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\faculty.accdt"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Faculty.accdt.masked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\faculty.accdt.masked"), dwFlags=0x2) returned 1 [0128.773] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Issues.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\issues.accdt"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Issues.accdt.masked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\issues.accdt.masked"), dwFlags=0x2) returned 1 [0129.275] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Marketing Projects.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\marketing projects.accdt"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Marketing Projects.accdt.masked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\marketing projects.accdt.masked"), dwFlags=0x2) returned 1 [0129.783] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Northwind.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\northwind.accdt"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Northwind.accdt.masked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\northwind.accdt.masked"), dwFlags=0x2) returned 1 [0129.789] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14fa2ef0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa0fc7880, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xa0fc7880, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0129.816] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\1 Right.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\1 right.accdt"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\1 Right.accdt.masked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\1 right.accdt.masked"), dwFlags=0x2) returned 1 [0129.844] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\1 Top.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\1 top.accdt"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\1 Top.accdt.masked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\1 top.accdt.masked"), dwFlags=0x2) returned 1 [0129.873] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\2 Right.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\2 right.accdt"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\2 Right.accdt.masked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\2 right.accdt.masked"), dwFlags=0x2) returned 1 [0129.903] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\2 Top.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\2 top.accdt"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\2 Top.accdt.masked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\2 top.accdt.masked"), dwFlags=0x2) returned 1 [0129.927] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Comments.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\comments.accdt"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Comments.accdt.masked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\comments.accdt.masked"), dwFlags=0x2) returned 1 [0130.289] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Contacts.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\contacts.accdt"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Contacts.accdt.masked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\contacts.accdt.masked"), dwFlags=0x2) returned 1 [0130.354] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Details.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\details.accdt"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Details.accdt.masked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\details.accdt.masked"), dwFlags=0x2) returned 1 [0130.380] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Dialog.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\dialog.accdt"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Dialog.accdt.masked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\dialog.accdt.masked"), dwFlags=0x2) returned 1 [0130.438] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Issues.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\issues.accdt"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Issues.accdt.masked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\issues.accdt.masked"), dwFlags=0x2) returned 1 [0130.469] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\List.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\list.accdt"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\List.accdt.masked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\list.accdt.masked"), dwFlags=0x2) returned 1 [0130.498] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Media.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\media.accdt"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Media.accdt.masked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\media.accdt.masked"), dwFlags=0x2) returned 1 [0130.524] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Msgbox.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\msgbox.accdt"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Msgbox.accdt.masked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\msgbox.accdt.masked"), dwFlags=0x2) returned 1 [0130.568] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Tabs.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\tabs.accdt"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Tabs.accdt.masked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\tabs.accdt.masked"), dwFlags=0x2) returned 1 [0130.666] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Tasks.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\tasks.accdt"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Tasks.accdt.masked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\tasks.accdt.masked"), dwFlags=0x2) returned 1 [0130.703] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Users.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\users.accdt"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Users.accdt.masked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\users.accdt.masked"), dwFlags=0x2) returned 1 [0131.212] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Projects.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\projects.accdt"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Projects.accdt.masked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\projects.accdt.masked"), dwFlags=0x2) returned 1 [0131.727] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Sales Pipeline.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\sales pipeline.accdt"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Sales Pipeline.accdt.masked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\sales pipeline.accdt.masked"), dwFlags=0x2) returned 1 [0132.241] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Students.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\students.accdt"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Students.accdt.masked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\students.accdt.masked"), dwFlags=0x2) returned 1 [0132.889] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Tasks.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\tasks.accdt"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Tasks.accdt.masked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\tasks.accdt.masked"), dwFlags=0x2) returned 1 [0132.895] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14ebe6b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa2d62a20, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xa2d62a20, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0133.141] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS\\107.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\wss\\107.accdt"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS\\107.accdt.masked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\wss\\107.accdt.masked"), dwFlags=0x2) returned 1 [0133.779] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS\\1100.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\wss\\1100.accdt"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS\\1100.accdt.masked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\wss\\1100.accdt.masked"), dwFlags=0x2) returned 1 [0134.058] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adjacencyletter.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyLetter.dotx.masked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adjacencyletter.dotx.masked"), dwFlags=0x2) returned 1 [0134.284] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyMergeLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adjacencymergeletter.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyMergeLetter.dotx.masked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adjacencymergeletter.dotx.masked"), dwFlags=0x2) returned 1 [0134.910] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyReport.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adjacencyreport.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyReport.dotx.masked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adjacencyreport.dotx.masked"), dwFlags=0x2) returned 1 [0135.169] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyResume.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adjacencyresume.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyResume.dotx.masked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adjacencyresume.dotx.masked"), dwFlags=0x2) returned 1 [0135.204] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ADR1.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr1.xlt"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ADR1.XLT.masked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr1.xlt.masked"), dwFlags=0x2) returned 1 [0135.234] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ADR10.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr10.xlt"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ADR10.XLT.masked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr10.xlt.masked"), dwFlags=0x2) returned 1 [0135.266] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ADR2.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr2.xlt"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ADR2.XLT.masked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr2.xlt.masked"), dwFlags=0x2) returned 1 [0135.306] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ADR3.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr3.xlt"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ADR3.XLT.masked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr3.xlt.masked"), dwFlags=0x2) returned 1 [0135.340] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ADR4.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr4.xlt"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ADR4.XLT.masked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr4.xlt.masked"), dwFlags=0x2) returned 1 [0135.374] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ADR5.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr5.xlt"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ADR5.XLT.masked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr5.xlt.masked"), dwFlags=0x2) returned 1 [0135.406] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ADR6.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr6.xlt"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ADR6.XLT.masked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr6.xlt.masked"), dwFlags=0x2) returned 1 [0135.440] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ADR7.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr7.xlt"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ADR7.XLT.masked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr7.xlt.masked"), dwFlags=0x2) returned 1 [0135.472] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ADR8.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr8.xlt"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ADR8.XLT.masked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr8.xlt.masked"), dwFlags=0x2) returned 1 [0135.530] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ADR9.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr9.xlt"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ADR9.XLT.masked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr9.xlt.masked"), dwFlags=0x2) returned 1 [0135.705] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\apothecaryletter.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryLetter.dotx.masked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\apothecaryletter.dotx.masked"), dwFlags=0x2) returned 1 [0135.900] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryMergeLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\apothecarymergeletter.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryMergeLetter.dotx.masked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\apothecarymergeletter.dotx.masked"), dwFlags=0x2) returned 1 [0136.118] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryNewsletter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\apothecarynewsletter.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryNewsletter.dotx.masked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\apothecarynewsletter.dotx.masked"), dwFlags=0x2) returned 1 [0136.369] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryResume.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\apothecaryresume.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryResume.dotx.masked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\apothecaryresume.dotx.masked"), dwFlags=0x2) returned 1 [0136.392] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\BillingStatement.xltx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\billingstatement.xltx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\BillingStatement.xltx.masked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\billingstatement.xltx.masked"), dwFlags=0x2) returned 1 [0136.934] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\blacktieletter.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieLetter.dotx.masked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\blacktieletter.dotx.masked"), dwFlags=0x2) returned 1 [0137.478] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieMergeLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\blacktiemergeletter.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieMergeLetter.dotx.masked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\blacktiemergeletter.dotx.masked"), dwFlags=0x2) returned 1 [0138.055] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieNewsletter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\blacktienewsletter.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieNewsletter.dotx.masked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\blacktienewsletter.dotx.masked"), dwFlags=0x2) returned 1 [0138.691] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieResume.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\blacktieresume.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieResume.dotx.masked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\blacktieresume.dotx.masked"), dwFlags=0x2) returned 1 [0138.713] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Blog.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\blog.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Blog.dotx.masked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\blog.dotx.masked"), dwFlags=0x2) returned 1 [0138.745] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\BloodPressureTracker.xltx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\bloodpressuretracker.xltx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\BloodPressureTracker.xltx.masked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\bloodpressuretracker.xltx.masked"), dwFlags=0x2) returned 1 [0139.304] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ClassicPhotoAlbum.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\classicphotoalbum.potx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ClassicPhotoAlbum.potx.masked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\classicphotoalbum.potx.masked"), dwFlags=0x2) returned 1 [0140.133] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ContemporaryPhotoAlbum.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\contemporaryphotoalbum.potx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ContemporaryPhotoAlbum.potx.masked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\contemporaryphotoalbum.potx.masked"), dwFlags=0x2) returned 1 [0140.342] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\essentialletter.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialLetter.dotx.masked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\essentialletter.dotx.masked"), dwFlags=0x2) returned 1 [0140.494] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialMergeLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\essentialmergeletter.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialMergeLetter.dotx.masked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\essentialmergeletter.dotx.masked"), dwFlags=0x2) returned 1 [0141.105] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialReport.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\essentialreport.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialReport.dotx.masked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\essentialreport.dotx.masked"), dwFlags=0x2) returned 1 [0141.486] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialResume.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\essentialresume.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialResume.dotx.masked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\essentialresume.dotx.masked"), dwFlags=0x2) returned 1 [0141.652] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\executiveletter.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveLetter.dotx.masked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\executiveletter.dotx.masked"), dwFlags=0x2) returned 1 [0141.805] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveMergeLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\executivemergeletter.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveMergeLetter.dotx.masked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\executivemergeletter.dotx.masked"), dwFlags=0x2) returned 1 [0142.107] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveNewsletter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\executivenewsletter.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveNewsletter.dotx.masked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\executivenewsletter.dotx.masked"), dwFlags=0x2) returned 1 [0142.746] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveReport.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\executivereport.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveReport.dotx.masked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\executivereport.dotx.masked"), dwFlags=0x2) returned 1 [0142.873] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveResume.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\executiveresume.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveResume.dotx.masked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\executiveresume.dotx.masked"), dwFlags=0x2) returned 1 [0142.896] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ExpenseReport.xltx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\expensereport.xltx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ExpenseReport.xltx.masked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\expensereport.xltx.masked"), dwFlags=0x2) returned 1 [0142.902] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3aa710, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa8cbfb80, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xa8cbfb80, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0143.458] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\FiveRules.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\fiverules.potx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\FiveRules.potx.masked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\fiverules.potx.masked"), dwFlags=0x2) returned 1 [0143.973] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\IntroducingPowerPoint2010.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\introducingpowerpoint2010.potx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\IntroducingPowerPoint2010.potx.masked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\introducingpowerpoint2010.potx.masked"), dwFlags=0x2) returned 1 [0144.038] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\LoanAmortization.xltx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\loanamortization.xltx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\LoanAmortization.xltx.masked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\loanamortization.xltx.masked"), dwFlags=0x2) returned 1 [0144.085] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Office Word 2003 Look.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\office word 2003 look.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Office Word 2003 Look.dotx.masked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\office word 2003 look.dotx.masked"), dwFlags=0x2) returned 1 [0144.092] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc75c370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa980e400, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xa980e400, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0144.096] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc75c370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa9834560, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xa9834560, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0144.101] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Notebook Templates\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc7a8630, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa9834560, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xa9834560, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0144.104] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc75c370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa9834560, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xa9834560, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0144.377] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\ACADEMIC.ONE" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\onenote\\14\\stationery\\academic.one"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\ACADEMIC.ONE.masked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\onenote\\14\\stationery\\academic.one.masked"), dwFlags=0x2) returned 1 [0144.613] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\BLANK.ONE" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\onenote\\14\\stationery\\blank.one"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\BLANK.ONE.masked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\onenote\\14\\stationery\\blank.one.masked"), dwFlags=0x2) returned 1 [0144.960] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\BUSINESS.ONE" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\onenote\\14\\stationery\\business.one"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\BUSINESS.ONE.masked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\onenote\\14\\stationery\\business.one.masked"), dwFlags=0x2) returned 1 [0145.499] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\DESIGNER.ONE" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\onenote\\14\\stationery\\designer.one"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\DESIGNER.ONE.masked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\onenote\\14\\stationery\\designer.one.masked"), dwFlags=0x2) returned 1 [0145.733] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\PLANNERS.ONE" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\onenote\\14\\stationery\\planners.one"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\PLANNERS.ONE.masked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\onenote\\14\\stationery\\planners.one.masked"), dwFlags=0x2) returned 1 [0145.770] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\PersonalMonthlyBudget.xltx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\personalmonthlybudget.xltx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\PersonalMonthlyBudget.xltx.masked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\personalmonthlybudget.xltx.masked"), dwFlags=0x2) returned 1 [0145.997] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Pitchbook.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\pitchbook.potx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Pitchbook.potx.masked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\pitchbook.potx.masked"), dwFlags=0x2) returned 1 [0146.553] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ProjectStatusReport.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\projectstatusreport.potx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ProjectStatusReport.potx.masked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\projectstatusreport.potx.masked"), dwFlags=0x2) returned 1 [0146.574] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\PROJPLAN.XLTX" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\projplan.xltx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\PROJPLAN.XLTX.masked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\projplan.xltx.masked"), dwFlags=0x2) returned 1 [0146.843] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\QuizShow.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\quizshow.potx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\QuizShow.potx.masked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\quizshow.potx.masked"), dwFlags=0x2) returned 1 [0146.906] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\SalesReport.xltx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\salesreport.xltx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\SalesReport.xltx.masked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\salesreport.xltx.masked"), dwFlags=0x2) returned 1 [0146.927] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\TASKLIST.XLTX" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\tasklist.xltx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\TASKLIST.XLTX.masked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\tasklist.xltx.masked"), dwFlags=0x2) returned 1 [0146.956] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\TimeCard.xltx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\timecard.xltx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\TimeCard.xltx.masked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\timecard.xltx.masked"), dwFlags=0x2) returned 1 [0147.527] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Training.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\training.potx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Training.potx.masked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\training.potx.masked"), dwFlags=0x2) returned 1 [0148.040] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanPhotoAlbum.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\urbanphotoalbum.potx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanPhotoAlbum.potx.masked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\urbanphotoalbum.potx.masked"), dwFlags=0x2) returned 1 [0148.274] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\WidescreenPresentation.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\widescreenpresentation.potx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\WidescreenPresentation.potx.masked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\widescreenpresentation.potx.masked"), dwFlags=0x2) returned 1 [0148.281] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\Presentation Designs\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xabfed480, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xabfed480, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0148.281] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\Presentation Designs\\Maple.gif" (normalized: "c:\\program files\\microsoft office\\templates\\presentation designs\\maple.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\Presentation Designs\\Maple.gif.masked" (normalized: "c:\\program files\\microsoft office\\templates\\presentation designs\\maple.gif.masked"), dwFlags=0x2) returned 1 [0148.287] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft SQL Server Compact Edition\\*", lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xabfed480, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xabfed480, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555ca0 [0148.291] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xabfed480, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xabfed480, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555ce0 [0148.293] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\Desktop\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xac0135e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xac0135e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0148.297] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Sync Framework\\*", lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xac0135e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xac0135e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555ca0 [0148.301] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Sync Framework\\v1.0\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xac0135e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xac0135e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555ce0 [0148.305] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6626d2b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xac0135e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xac0135e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0148.312] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6626d2b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xac039740, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xac039740, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0148.316] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6626d2b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xac039740, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xac039740, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x10, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0148.446] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements\\SynchronizationEula.rtf" (normalized: "c:\\program files\\microsoft sync framework\\v1.0\\documentation\\1033\\license agreements\\synchronizationeula.rtf"), lpNewFileName="C:\\\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements\\SynchronizationEula.rtf.masked" (normalized: "c:\\program files\\microsoft sync framework\\v1.0\\documentation\\1033\\license agreements\\synchronizationeula.rtf.masked"), dwFlags=0x2) returned 1 [0148.453] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xac1903a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xac1903a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0148.459] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xac1903a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xac1903a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0148.464] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\resources\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x522b67d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xac1903a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xac1903a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0148.468] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\resources\\1033\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x522b67d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xac1b6500, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xac1b6500, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0148.472] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Synchronization Services\\*", lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xac1b6500, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xac1b6500, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555ca0 [0148.474] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xac1b6500, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xac1b6500, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555ce0 [0148.480] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\v1.0\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xac1b6500, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xac1b6500, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0148.484] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\MSBuild\\*", lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xac1dc660, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xac1dc660, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555ce0 [0148.488] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\MSBuild\\Microsoft\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xac1dc660, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xac1dc660, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555ca0 [0148.492] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xac1dc660, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xac1dc660, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0148.496] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xac2027c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xac2027c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0148.500] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xac2027c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xac2027c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0148.504] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Reference Assemblies\\*", lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xac2027c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xac2027c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555ce0 [0148.507] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Reference Assemblies\\Microsoft\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xac2027c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xac2027c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555ca0 [0148.512] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xac228920, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xac228920, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0148.517] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xac228920, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xac228920, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0148.521] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xac228920, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xac228920, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0148.597] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\FrameworkList.xml" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\redistlist\\frameworklist.xml"), lpNewFileName="C:\\\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\FrameworkList.xml.masked" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\redistlist\\frameworklist.xml.masked"), dwFlags=0x2) returned 1 [0148.603] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WinFXList.xml" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\winfxlist.xml"), lpNewFileName="C:\\\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WinFXList.xml.masked" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\winfxlist.xml.masked"), dwFlags=0x2) returned 1 [0148.610] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xac30d160, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xac30d160, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0148.614] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xac30d160, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xac30d160, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0148.619] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Uninstall Information\\*", lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x4232b3dd, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0xac30d160, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xac30d160, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555ce0 [0148.621] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Defender\\*", lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xac3332c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xac3332c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555ce0 [0148.625] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Defender\\en-US\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xac3332c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xac3332c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555ca0 [0148.634] GetFileType (hFile=0x64) returned 0x1 [0148.635] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Journal\\*", lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e177d26, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xac3332c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xac3332c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555ce0 [0148.638] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Journal\\en-US\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e4268f4, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xac359420, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xac359420, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555ca0 [0148.643] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Journal\\Templates\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e472dd2, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xac359420, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xac359420, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555ca0 [0148.645] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Mail\\*", lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xac359420, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xac359420, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555ce0 [0148.648] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Mail\\en-US\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xac359420, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xac359420, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555ca0 [0148.651] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Media Player\\*", lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xac359420, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xac359420, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555ce0 [0148.656] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Media Player\\en-US\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ead9a68, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xac37f580, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xac37f580, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555ca0 [0148.657] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Media Player\\Icons\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x180, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555ca0 [0148.660] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Media Player\\Media Renderer\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xac37f580, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xac37f580, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555ca0 [0148.666] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Media Player\\Network Sharing\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xac37f580, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xac37f580, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555ca0 [0148.671] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Media Player\\Skins\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xac3a56e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xac3a56e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555ca0 [0148.674] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Media Player\\Visualizations\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xac3a56e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xac3a56e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555ca0 [0148.678] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows NT\\*", lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xac3a56e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xac3a56e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555ce0 [0148.681] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows NT\\Accessories\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xac3a56e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xac3a56e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555ca0 [0148.683] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows NT\\Accessories\\en-US\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xac3cb840, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xac3cb840, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0148.686] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows NT\\TableTextService\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xac3cb840, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xac3cb840, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555ca0 [0148.689] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows NT\\TableTextService\\en-US\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xac3cb840, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xac3cb840, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0148.694] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Photo Viewer\\*", lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xac3cb840, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xac3cb840, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555ce0 [0148.698] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Photo Viewer\\en-US\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xac3cb840, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xac3cb840, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555ca0 [0148.706] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Portable Devices\\*", lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xac3f19a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xac3f19a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555ce0 [0148.709] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\*", lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xac3f19a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xac3f19a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555ce0 [0148.713] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\en-US\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xac3f19a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xac3f19a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555ca0 [0148.717] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xac417b00, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xac417b00, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555ca0 [0148.723] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xac417b00, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xac417b00, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0148.727] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xac417b00, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xac417b00, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0148.730] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xac43dc60, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xac43dc60, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0148.734] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\js\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xac43dc60, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xac43dc60, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0148.740] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xac43dc60, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xac43dc60, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0148.821] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xac4fc340, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xac4fc340, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0148.825] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xac5224a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xac5224a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0148.835] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xac5224a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xac5224a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0148.840] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xac548600, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xac548600, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0148.844] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xac548600, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xac548600, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0148.892] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xac5baa20, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xac5baa20, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0148.898] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xac5baa20, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xac5baa20, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0148.902] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\css\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xac5e0b80, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xac5e0b80, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0148.905] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\js\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xac5e0b80, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xac5e0b80, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0148.909] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xac5e0b80, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xac5e0b80, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0148.917] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xac606ce0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xac606ce0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0148.921] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xac606ce0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xac606ce0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0148.923] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\css\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xac606ce0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xac606ce0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0148.928] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xac606ce0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xac606ce0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0148.934] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xac62ce40, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xac62ce40, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0148.944] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1afe884, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xac62ce40, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xac62ce40, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0148.948] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\css\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1b24af3, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xac62ce40, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xac62ce40, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0148.952] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\en-US\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1b4ad62, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xac652fa0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xac652fa0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0148.958] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1b4ad62, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xac652fa0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xac652fa0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0148.967] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\js\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1cc85b8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xac679100, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xac679100, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0148.971] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xac679100, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xac679100, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0148.978] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xac679100, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xac679100, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0148.982] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\css\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xac69f260, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xac69f260, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0148.988] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\js\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xac69f260, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xac69f260, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0148.993] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xac69f260, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xac69f260, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0149.005] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xac6c53c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xac6c53c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0149.010] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xac6c53c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xac6c53c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0149.014] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xac6eb520, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xac6eb520, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0149.019] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\js\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xac6eb520, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xac6eb520, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0149.024] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xac6eb520, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xac6eb520, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0149.035] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xac711680, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xac711680, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0149.039] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xac711680, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xac711680, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0149.043] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\css\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xac7377e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xac7377e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0149.047] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\js\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xac7377e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xac7377e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0149.051] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xac7377e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xac7377e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0149.055] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\in_sidebar\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xac7377e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xac7377e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0149.061] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\on_desktop\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xac75d940, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xac75d940, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0149.068] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xac75d940, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xac75d940, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0149.074] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xac783aa0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xac783aa0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0149.077] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xac783aa0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xac783aa0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0149.083] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xac783aa0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xac783aa0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0149.089] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xac7a9c00, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xac7a9c00, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0149.096] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xac7a9c00, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xac7a9c00, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0149.174] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xac8682e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xac8682e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0149.240] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Shared Gadgets\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xac900860, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xac900860, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555ca0 [0149.241] GetFileType (hFile=0x60) returned 0x1 [0149.244] GetFileType (hFile=0x60) returned 0x1 [0149.245] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\*", lpFindFileData=0x38e4b0 | out: lpFindFileData=0x38e4b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xac9269c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xac9269c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555ce0 [0149.258] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\*", lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf40b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xac9269c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xac9269c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555c60 [0149.261] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf40b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xac94cb20, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xac94cb20, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555ca0 [0149.264] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Esl\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ffe6ce0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xac94cb20, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xac94cb20, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0149.267] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf40b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xac94cb20, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xac94cb20, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0149.272] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x802ba700, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xac94cb20, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xac94cb20, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0149.350] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.suo"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.SUO.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.suo.masked"), dwFlags=0x2) returned 1 [0149.355] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf66ca0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xaca31360, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xaca31360, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0149.402] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.suo"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.SUO.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.suo.masked"), dwFlags=0x2) returned 1 [0149.409] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xacaa3780, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xacaa3780, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0149.414] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81efec40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xacaa3780, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xacaa3780, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0149.608] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cat\\adobeid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\AdobeID.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cat\\adobeid.pdf.masked"), dwFlags=0x2) returned 1 [0149.736] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cat\\defaultid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\DefaultID.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cat\\defaultid.pdf.masked"), dwFlags=0x2) returned 1 [0149.745] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8039ef40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xacde95c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xacde95c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0149.897] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\chs\\adobeid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\AdobeID.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\chs\\adobeid.pdf.masked"), dwFlags=0x2) returned 1 [0150.102] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\chs\\defaultid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\DefaultID.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\chs\\defaultid.pdf.masked"), dwFlags=0x2) returned 1 [0150.109] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8039ef40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xad155560, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xad155560, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0150.243] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cht\\adobeid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\AdobeID.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cht\\adobeid.pdf.masked"), dwFlags=0x2) returned 1 [0150.284] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cht\\defaultid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\DefaultID.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cht\\defaultid.pdf.masked"), dwFlags=0x2) returned 1 [0150.290] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a2abc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xad31e5e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xad31e5e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0150.442] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cze\\adobeid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\AdobeID.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cze\\adobeid.pdf.masked"), dwFlags=0x2) returned 1 [0150.673] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cze\\defaultid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\DefaultID.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cze\\defaultid.pdf.masked"), dwFlags=0x2) returned 1 [0150.679] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80378de0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xad6b06e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xad6b06e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0150.793] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\dan\\adobeid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\AdobeID.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\dan\\adobeid.pdf.masked"), dwFlags=0x2) returned 1 [0150.951] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\dan\\defaultid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\DefaultID.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\dan\\defaultid.pdf.masked"), dwFlags=0x2) returned 1 [0150.957] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8058e120, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xad95dfa0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xad95dfa0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0151.051] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\deu\\adobeid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\AdobeID.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\deu\\adobeid.pdf.masked"), dwFlags=0x2) returned 1 [0151.117] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\deu\\defaultid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\DefaultID.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\deu\\defaultid.pdf.masked"), dwFlags=0x2) returned 1 [0151.123] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8058e120, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xadb00ec0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xadb00ec0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0151.202] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\enu\\adobeid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\AdobeID.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\enu\\adobeid.pdf.masked"), dwFlags=0x2) returned 1 [0151.286] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\enu\\defaultid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\DefaultID.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\enu\\defaultid.pdf.masked"), dwFlags=0x2) returned 1 [0151.302] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805b4280, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xadca3de0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xadca3de0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0151.377] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\esp\\adobeid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\AdobeID.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\esp\\adobeid.pdf.masked"), dwFlags=0x2) returned 1 [0151.468] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\esp\\defaultid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\DefaultID.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\esp\\defaultid.pdf.masked"), dwFlags=0x2) returned 1 [0151.474] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\EUQ\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xade46d00, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xade46d00, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0151.479] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805b4280, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xade6ce60, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xade6ce60, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0151.549] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\fra\\adobeid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\AdobeID.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\fra\\adobeid.pdf.masked"), dwFlags=0x2) returned 1 [0151.643] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\fra\\defaultid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\DefaultID.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\fra\\defaultid.pdf.masked"), dwFlags=0x2) returned 1 [0151.648] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a2abc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xae00fd80, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xae00fd80, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0151.668] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\hrv\\adobeid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\AdobeID.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\hrv\\adobeid.pdf.masked"), dwFlags=0x2) returned 1 [0151.687] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\hrv\\defaultid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\DefaultID.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\hrv\\defaultid.pdf.masked"), dwFlags=0x2) returned 1 [0151.693] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a2abc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xae05c040, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xae05c040, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0151.781] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\hun\\adobeid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\AdobeID.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\hun\\adobeid.pdf.masked"), dwFlags=0x2) returned 1 [0151.875] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\hun\\defaultid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\DefaultID.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\hun\\defaultid.pdf.masked"), dwFlags=0x2) returned 1 [0151.880] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805b4280, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xae2250c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xae2250c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0151.968] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ita\\adobeid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\AdobeID.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ita\\adobeid.pdf.masked"), dwFlags=0x2) returned 1 [0152.057] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ita\\defaultid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\DefaultID.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ita\\defaultid.pdf.masked"), dwFlags=0x2) returned 1 [0152.064] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xae3ee140, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xae3ee140, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0152.094] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\jpn\\adobeid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\AdobeID.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\jpn\\adobeid.pdf.masked"), dwFlags=0x2) returned 1 [0152.119] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\jpn\\defaultid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\DefaultID.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\jpn\\defaultid.pdf.masked"), dwFlags=0x2) returned 1 [0152.124] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xae4866c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xae4866c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0152.147] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\kor\\adobeid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\AdobeID.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\kor\\adobeid.pdf.masked"), dwFlags=0x2) returned 1 [0152.173] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\kor\\defaultid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\DefaultID.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\kor\\defaultid.pdf.masked"), dwFlags=0x2) returned 1 [0152.180] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xae51ec40, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xae51ec40, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0152.248] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\nld\\adobeid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\AdobeID.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\nld\\adobeid.pdf.masked"), dwFlags=0x2) returned 1 [0152.360] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\nld\\defaultid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\DefaultID.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\nld\\defaultid.pdf.masked"), dwFlags=0x2) returned 1 [0152.367] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xae6e7cc0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xae6e7cc0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0152.434] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\nor\\adobeid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\AdobeID.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\nor\\adobeid.pdf.masked"), dwFlags=0x2) returned 1 [0152.500] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\nor\\defaultid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\DefaultID.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\nor\\defaultid.pdf.masked"), dwFlags=0x2) returned 1 [0152.506] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a2abc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xae83e920, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xae83e920, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0152.726] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\pol\\adobeid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\AdobeID.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\pol\\adobeid.pdf.masked"), dwFlags=0x2) returned 1 [0152.880] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\pol\\defaultid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\DefaultID.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\pol\\defaultid.pdf.masked"), dwFlags=0x2) returned 1 [0152.885] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805b4280, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xaebd0a20, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xaebd0a20, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0152.953] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ptb\\adobeid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\AdobeID.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ptb\\adobeid.pdf.masked"), dwFlags=0x2) returned 1 [0153.032] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ptb\\defaultid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\DefaultID.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ptb\\defaultid.pdf.masked"), dwFlags=0x2) returned 1 [0153.040] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a2abc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xaed4d7e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xaed4d7e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0153.066] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rum\\adobeid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\AdobeID.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rum\\adobeid.pdf.masked"), dwFlags=0x2) returned 1 [0153.092] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rum\\defaultid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\DefaultID.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rum\\defaultid.pdf.masked"), dwFlags=0x2) returned 1 [0153.098] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a04a60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xaede5d60, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xaede5d60, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0153.218] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rus\\adobeid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\AdobeID.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rus\\adobeid.pdf.masked"), dwFlags=0x2) returned 1 [0153.351] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rus\\defaultid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\DefaultID.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rus\\defaultid.pdf.masked"), dwFlags=0x2) returned 1 [0153.357] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a04a60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xaf047360, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xaf047360, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0153.446] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sky\\adobeid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\AdobeID.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sky\\adobeid.pdf.masked"), dwFlags=0x2) returned 1 [0153.527] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sky\\defaultid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\DefaultID.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sky\\defaultid.pdf.masked"), dwFlags=0x2) returned 1 [0153.533] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a04a60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xaf1ea280, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xaf1ea280, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0153.563] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\slv\\adobeid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\AdobeID.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\slv\\adobeid.pdf.masked"), dwFlags=0x2) returned 1 [0153.588] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\slv\\defaultid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\DefaultID.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\slv\\defaultid.pdf.masked"), dwFlags=0x2) returned 1 [0153.593] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805b4280, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xaf282800, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xaf282800, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0153.660] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\suo\\adobeid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\AdobeID.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\suo\\adobeid.pdf.masked"), dwFlags=0x2) returned 1 [0153.727] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\suo\\defaultid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\DefaultID.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\suo\\defaultid.pdf.masked"), dwFlags=0x2) returned 1 [0153.733] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xaf3d9460, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xaf3d9460, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0153.826] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sve\\adobeid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\AdobeID.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sve\\adobeid.pdf.masked"), dwFlags=0x2) returned 1 [0153.920] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sve\\defaultid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\DefaultID.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sve\\defaultid.pdf.masked"), dwFlags=0x2) returned 1 [0153.928] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x809de900, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xaf5c8640, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xaf5c8640, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0154.236] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\tur\\adobeid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\AdobeID.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\tur\\adobeid.pdf.masked"), dwFlags=0x2) returned 1 [0154.591] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\tur\\defaultid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\DefaultID.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\tur\\defaultid.pdf.masked"), dwFlags=0x2) returned 1 [0154.640] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80861b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xafc7a420, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xafc7a420, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0154.740] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ukr\\adobeid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\AdobeID.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ukr\\adobeid.pdf.masked"), dwFlags=0x2) returned 1 [0155.056] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ukr\\defaultid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\DefaultID.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ukr\\defaultid.pdf.masked"), dwFlags=0x2) returned 1 [0155.063] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Javascripts\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ffe6ce0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xb007e940, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xb007e940, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0155.632] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Javascripts\\JSByteCodeWin.bin" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\javascripts\\jsbytecodewin.bin"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Javascripts\\JSByteCodeWin.bin.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\javascripts\\jsbytecodewin.bin.masked"), dwFlags=0x2) returned 1 [0155.638] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xb05ffc20, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xb05ffc20, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0155.642] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81efec40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xb0625d80, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xb0625d80, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0155.697] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\cat\\license.html"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\license.html.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\cat\\license.html.masked"), dwFlags=0x2) returned 1 [0155.704] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81df42a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xb06be300, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xb06be300, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0155.786] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\chs\\license.html"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\license.html.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\chs\\license.html.masked"), dwFlags=0x2) returned 1 [0155.793] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81df42a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xb077c9e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xb077c9e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0155.878] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\cht\\license.html"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\license.html.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\cht\\license.html.masked"), dwFlags=0x2) returned 1 [0155.885] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81cc37a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xb0861220, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xb0861220, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0155.957] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\cze\\license.html"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\license.html.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\cze\\license.html.masked"), dwFlags=0x2) returned 1 [0155.964] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81dce140, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xb091f900, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xb091f900, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0156.017] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\dan\\license.html"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\license.html.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\dan\\license.html.masked"), dwFlags=0x2) returned 1 [0156.023] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81df42a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xb09b7e80, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xb09b7e80, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0156.081] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\deu\\license.html"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\license.html.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\deu\\license.html.masked"), dwFlags=0x2) returned 1 [0156.089] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xb0a50400, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xb0a50400, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0156.139] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\enu\\license.html"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\license.html.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\enu\\license.html.masked"), dwFlags=0x2) returned 1 [0156.145] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xb0ae8980, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xb0ae8980, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0156.325] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\esp\\license.html"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\license.html.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\esp\\license.html.masked"), dwFlags=0x2) returned 1 [0156.331] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81efec40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xb0cb1a00, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xb0cb1a00, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0156.397] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\euq\\license.html"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\license.html.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\euq\\license.html.masked"), dwFlags=0x2) returned 1 [0156.403] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xb0d49f80, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xb0d49f80, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0156.468] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\fra\\license.html"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\license.html.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\fra\\license.html.masked"), dwFlags=0x2) returned 1 [0156.474] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81ce9900, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xb0e08660, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xb0e08660, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0156.526] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\hrv\\license.html"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\license.html.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\hrv\\license.html.masked"), dwFlags=0x2) returned 1 [0156.534] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a76e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xb0ea0be0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xb0ea0be0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0156.653] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\hun\\license.html"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\license.html.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\hun\\license.html.masked"), dwFlags=0x2) returned 1 [0156.661] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xb0fd16e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xb0fd16e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0156.711] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\ita\\license.html"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\license.html.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\ita\\license.html.masked"), dwFlags=0x2) returned 1 [0156.717] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81dce140, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xb1069c60, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xb1069c60, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0156.848] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\jpn\\license.html"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\license.html.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\jpn\\license.html.masked"), dwFlags=0x2) returned 1 [0156.856] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81d81e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xb119a760, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xb119a760, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0156.973] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\kor\\license.html"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\license.html.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\kor\\license.html.masked"), dwFlags=0x2) returned 1 [0156.980] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81dce140, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xb12cb260, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xb12cb260, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0157.037] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\nld\\license.html"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\license.html.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\nld\\license.html.masked"), dwFlags=0x2) returned 1 [0157.043] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xb13637e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xb13637e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0157.094] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\nor\\license.html"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\license.html.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\nor\\license.html.masked"), dwFlags=0x2) returned 1 [0157.100] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a76e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xb13fbd60, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xb13fbd60, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0157.163] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\pol\\license.html"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\license.html.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\pol\\license.html.masked"), dwFlags=0x2) returned 1 [0157.169] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81d81e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xb14942e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xb14942e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0157.235] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\ptb\\license.html"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\license.html.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\ptb\\license.html.masked"), dwFlags=0x2) returned 1 [0157.242] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a76e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xb15529c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xb15529c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0157.316] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\rum\\license.html"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\license.html.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\rum\\license.html.masked"), dwFlags=0x2) returned 1 [0157.324] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xb16110a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xb16110a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0157.600] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\rus\\license.html"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\license.html.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\rus\\license.html.masked"), dwFlags=0x2) returned 1 [0157.607] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xb18e4ac0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xb18e4ac0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0157.675] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\sky\\license.html"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\license.html.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\sky\\license.html.masked"), dwFlags=0x2) returned 1 [0157.682] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xb197d040, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xb197d040, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0157.731] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\slv\\license.html"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\license.html.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\slv\\license.html.masked"), dwFlags=0x2) returned 1 [0157.736] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81dce140, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xb1a155c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xb1a155c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0157.790] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\suo\\license.html"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\license.html.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\suo\\license.html.masked"), dwFlags=0x2) returned 1 [0157.796] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81d81e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xb1aadb40, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xb1aadb40, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0157.847] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\sve\\license.html"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\license.html.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\sve\\license.html.masked"), dwFlags=0x2) returned 1 [0157.853] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xb1b1ff60, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xb1b1ff60, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0157.916] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\tur\\license.html"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\license.html.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\tur\\license.html.masked"), dwFlags=0x2) returned 1 [0157.921] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xb1bde640, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xb1bde640, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0158.160] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\ukr\\license.html"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\license.html.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\ukr\\license.html.masked"), dwFlags=0x2) returned 1 [0158.167] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d618a80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xb1e19ae0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xb1e19ae0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0158.172] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d853f20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xb1e3fc40, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xb1e3fc40, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0158.177] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f24da0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xb1e3fc40, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xb1e3fc40, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0158.181] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xb1e3fc40, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xb1e3fc40, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0158.185] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f971c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xb1e65da0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xb1e65da0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0158.190] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d723420, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xb1e65da0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xb1e65da0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0158.193] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f971c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xb1e65da0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xb1e65da0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0158.198] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d723420, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xb1e65da0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xb1e65da0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0158.202] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xb1e8bf00, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xb1e8bf00, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0158.206] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d63ebe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xb1e8bf00, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xb1e8bf00, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0158.213] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f24da0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xb1e8bf00, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xb1e8bf00, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0158.217] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d853f20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xb1eb2060, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xb1eb2060, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0158.220] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xb1eb2060, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xb1eb2060, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0158.225] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d723420, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xb1eb2060, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xb1eb2060, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0158.274] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\accessibility.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\accessibility.suo"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\accessibility.SUO.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\accessibility.suo.masked"), dwFlags=0x2) returned 1 [0158.891] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Acroform.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\acroform.suo"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Acroform.SUO.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\acroform.suo.masked"), dwFlags=0x2) returned 1 [0158.902] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\AdobeCollabSync.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\adobecollabsync.suo"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\AdobeCollabSync.SUO.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\adobecollabsync.suo.masked"), dwFlags=0x2) returned 1 [0159.434] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Annots.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\annots.suo"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Annots.SUO.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\annots.suo.masked"), dwFlags=0x2) returned 1 [0159.452] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\BRdlang32.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\brdlang32.suo"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\BRdlang32.SUO.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\brdlang32.suo.masked"), dwFlags=0x2) returned 1 [0159.576] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Checkers.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\checkers.suo"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Checkers.SUO.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\checkers.suo.masked"), dwFlags=0x2) returned 1 [0159.710] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\DigSig.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\digsig.suo"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\DigSig.SUO.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\digsig.suo.masked"), dwFlags=0x2) returned 1 [0159.732] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\DVA.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\dva.suo"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\DVA.SUO.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\dva.suo.masked"), dwFlags=0x2) returned 1 [0159.744] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\eBook.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\ebook.suo"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\eBook.SUO.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\ebook.suo.masked"), dwFlags=0x2) returned 1 [0159.788] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\EScript.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\escript.suo"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\EScript.SUO.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\escript.suo.masked"), dwFlags=0x2) returned 1 [0159.796] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\IA32.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\ia32.suo"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\IA32.SUO.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\ia32.suo.masked"), dwFlags=0x2) returned 1 [0159.872] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\makeaccessible.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\makeaccessible.suo"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\makeaccessible.SUO.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\makeaccessible.suo.masked"), dwFlags=0x2) returned 1 [0159.952] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Multimedia.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\multimedia.suo"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Multimedia.SUO.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\multimedia.suo.masked"), dwFlags=0x2) returned 1 [0159.968] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\pddom.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\pddom.suo"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\pddom.SUO.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\pddom.suo.masked"), dwFlags=0x2) returned 1 [0160.485] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\PPKLITE.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\ppklite.suo"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\PPKLITE.SUO.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\ppklite.suo.masked"), dwFlags=0x2) returned 1 [0161.154] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\RdLang32.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\rdlang32.suo"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\RdLang32.SUO.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\rdlang32.suo.masked"), dwFlags=0x2) returned 1 [0161.173] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\ReadOutLoud.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\readoutloud.suo"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\ReadOutLoud.SUO.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\readoutloud.suo.masked"), dwFlags=0x2) returned 1 [0161.183] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\reflow.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\reflow.suo"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\reflow.SUO.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\reflow.suo.masked"), dwFlags=0x2) returned 1 [0161.208] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\SaveAsRTF.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\saveasrtf.suo"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\SaveAsRTF.SUO.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\saveasrtf.suo.masked"), dwFlags=0x2) returned 1 [0161.234] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Search.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\search.suo"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Search.SUO.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\search.suo.masked"), dwFlags=0x2) returned 1 [0161.252] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\SendMail.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\sendmail.suo"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\SendMail.SUO.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\sendmail.suo.masked"), dwFlags=0x2) returned 1 [0161.258] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xb3bb4c80, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xb3bb4c80, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0161.272] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Spelling.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\spelling.suo"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Spelling.SUO.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\spelling.suo.masked"), dwFlags=0x2) returned 1 [0161.291] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\updater.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\updater.suo"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\updater.SUO.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\updater.suo.masked"), dwFlags=0x2) returned 1 [0161.321] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Weblink.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\weblink.suo"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Weblink.SUO.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\weblink.suo.masked"), dwFlags=0x2) returned 1 [0161.326] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d749580, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xb3c4d200, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xb3c4d200, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0161.330] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xb3c4d200, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xb3c4d200, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0161.340] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xb3c4d200, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xb3c4d200, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0161.344] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xb3c73360, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xb3c73360, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0161.349] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xb3c73360, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xb3c73360, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0161.355] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xb3c994c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xb3c994c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0161.360] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d63ebe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xb3c994c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xb3c994c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0161.365] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xb3c994c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xb3c994c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0161.373] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d749580, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xb3cbf620, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xb3cbf620, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0161.377] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xb3cbf620, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xb3cbf620, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0161.381] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d6d7160, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xb3ce5780, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xb3ce5780, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0161.385] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xb3ce5780, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xb3ce5780, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0161.389] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d749580, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xb3ce5780, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xb3ce5780, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0161.393] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xb3ce5780, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xb3ce5780, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0161.398] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d795840, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xb3d0b8e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xb3d0b8e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0161.403] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xb3d0b8e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xb3d0b8e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0161.409] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xb3d0b8e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xb3d0b8e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0161.423] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xb3d31a40, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xb3d31a40, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0161.428] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d749580, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xb3d31a40, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xb3d31a40, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0161.434] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xb3d57ba0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xb3d57ba0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0161.437] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xb3d57ba0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xb3d57ba0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0161.442] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xb3d57ba0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xb3d57ba0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0161.447] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xb3d7dd00, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xb3d7dd00, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0161.452] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xb3d7dd00, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xb3d7dd00, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0161.456] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xb3d7dd00, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xb3d7dd00, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0161.461] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xb3da3e60, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xb3da3e60, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0161.465] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xb3da3e60, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xb3da3e60, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0161.478] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xb3dc9fc0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xb3dc9fc0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0161.485] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d749580, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xb3dc9fc0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xb3dc9fc0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0161.490] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xb3dc9fc0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xb3dc9fc0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0161.495] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d795840, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xb3df0120, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xb3df0120, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0161.499] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xb3df0120, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xb3df0120, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0161.504] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d795840, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xb3df0120, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xb3df0120, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0161.510] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xb3e16280, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xb3e16280, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0161.514] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d6d7160, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xb3e16280, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xb3e16280, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0161.518] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xb3e16280, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xb3e16280, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0161.523] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d618a80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xb3e3c3e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xb3e3c3e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0161.527] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f24da0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xb3e3c3e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xb3e3c3e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0162.035] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\PDFSigQFormalRep.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\pdfsigqformalrep.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\PDFSigQFormalRep.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\pdfsigqformalrep.pdf.masked"), dwFlags=0x2) returned 1 [0162.040] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xb4325140, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xb4325140, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0162.044] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82e05720, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xb4325140, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xb4325140, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0162.049] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82e519e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xb4325140, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xb4325140, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0162.055] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f804400, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xb434b2a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xb434b2a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0162.059] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f804400, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xb434b2a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xb434b2a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0162.063] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\*", lpFindFileData=0x38a2f4 | out: lpFindFileData=0x38a2f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81eb2980, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xb434b2a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xb434b2a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e20 [0162.154] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\dynamic.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Dynamic.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\dynamic.pdf.masked"), dwFlags=0x2) returned 1 [0162.222] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\faces.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Faces.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\faces.pdf.masked"), dwFlags=0x2) returned 1 [0162.284] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\pointers.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Pointers.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\pointers.pdf.masked"), dwFlags=0x2) returned 1 [0162.323] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\signhere.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\SignHere.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\signhere.pdf.masked"), dwFlags=0x2) returned 1 [0162.537] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\standard.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Standard.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\standard.pdf.masked"), dwFlags=0x2) returned 1 [0163.160] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\standardbusiness.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\StandardBusiness.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\standardbusiness.pdf.masked"), dwFlags=0x2) returned 1 [0163.167] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\*", lpFindFileData=0x38a2f4 | out: lpFindFileData=0x38a2f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xb4ddb440, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xb4ddb440, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e20 [0163.249] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\dynamic.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\Dynamic.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\dynamic.pdf.masked"), dwFlags=0x2) returned 1 [0163.296] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\Hanko.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\hanko.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\Hanko.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\hanko.pdf.masked"), dwFlags=0x2) returned 1 [0163.355] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\signhere.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\SignHere.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\signhere.pdf.masked"), dwFlags=0x2) returned 1 [0163.501] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\standardbusiness.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\StandardBusiness.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\standardbusiness.pdf.masked"), dwFlags=0x2) returned 1 [0163.507] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\*", lpFindFileData=0x38a2f4 | out: lpFindFileData=0x38a2f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff28600, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xb5121280, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xb5121280, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e20 [0163.587] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\dynamic.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Dynamic.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\dynamic.pdf.masked"), dwFlags=0x2) returned 1 [0163.639] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Hanko.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\hanko.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Hanko.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\hanko.pdf.masked"), dwFlags=0x2) returned 1 [0163.711] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\signhere.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\SignHere.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\signhere.pdf.masked"), dwFlags=0x2) returned 1 [0163.918] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\standardbusiness.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\StandardBusiness.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\standardbusiness.pdf.masked"), dwFlags=0x2) returned 1 [0163.925] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\*", lpFindFileData=0x38a2f4 | out: lpFindFileData=0x38a2f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8070aee0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xb55257a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xb55257a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e20 [0163.959] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\dynamic.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Dynamic.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\dynamic.pdf.masked"), dwFlags=0x2) returned 1 [0163.996] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\faces.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Faces.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\faces.pdf.masked"), dwFlags=0x2) returned 1 [0164.045] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\pointers.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Pointers.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\pointers.pdf.masked"), dwFlags=0x2) returned 1 [0164.399] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\signhere.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\SignHere.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\signhere.pdf.masked"), dwFlags=0x2) returned 1 [0164.591] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\standard.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Standard.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\standard.pdf.masked"), dwFlags=0x2) returned 1 [0164.754] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\standardbusiness.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\StandardBusiness.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\standardbusiness.pdf.masked"), dwFlags=0x2) returned 1 [0164.764] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\*", lpFindFileData=0x38a2f4 | out: lpFindFileData=0x38a2f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff4e760, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xb5d08080, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xb5d08080, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e20 [0164.822] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\dan\\dynamic.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\Dynamic.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\dan\\dynamic.pdf.masked"), dwFlags=0x2) returned 1 [0164.862] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\dan\\signhere.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\SignHere.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\dan\\signhere.pdf.masked"), dwFlags=0x2) returned 1 [0164.961] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\dan\\standardbusiness.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\StandardBusiness.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\dan\\standardbusiness.pdf.masked"), dwFlags=0x2) returned 1 [0164.967] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\*", lpFindFileData=0x38a2f4 | out: lpFindFileData=0x38a2f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fedc340, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xb5ef7260, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xb5ef7260, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e20 [0165.018] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\deu\\dynamic.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\Dynamic.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\deu\\dynamic.pdf.masked"), dwFlags=0x2) returned 1 [0165.061] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\deu\\signhere.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\SignHere.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\deu\\signhere.pdf.masked"), dwFlags=0x2) returned 1 [0165.158] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\deu\\standardbusiness.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\StandardBusiness.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\deu\\standardbusiness.pdf.masked"), dwFlags=0x2) returned 1 [0165.164] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\*", lpFindFileData=0x38a2f4 | out: lpFindFileData=0x38a2f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fedc340, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xb60e6440, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xb60e6440, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e20 [0165.221] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\enu\\dynamic.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\Dynamic.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\enu\\dynamic.pdf.masked"), dwFlags=0x2) returned 1 [0165.264] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\enu\\signhere.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\SignHere.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\enu\\signhere.pdf.masked"), dwFlags=0x2) returned 1 [0165.378] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\enu\\standardbusiness.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\StandardBusiness.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\enu\\standardbusiness.pdf.masked"), dwFlags=0x2) returned 1 [0165.383] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\*", lpFindFileData=0x38a2f4 | out: lpFindFileData=0x38a2f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff4e760, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xb62fb780, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xb62fb780, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e20 [0165.436] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\esp\\dynamic.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\Dynamic.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\esp\\dynamic.pdf.masked"), dwFlags=0x2) returned 1 [0165.474] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\esp\\signhere.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\SignHere.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\esp\\signhere.pdf.masked"), dwFlags=0x2) returned 1 [0166.012] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\esp\\standardbusiness.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\StandardBusiness.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\esp\\standardbusiness.pdf.masked"), dwFlags=0x2) returned 1 [0166.018] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\*", lpFindFileData=0x38a2f4 | out: lpFindFileData=0x38a2f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81e8c820, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xb6914fe0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xb6914fe0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e20 [0166.071] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\dynamic.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Dynamic.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\dynamic.pdf.masked"), dwFlags=0x2) returned 1 [0166.108] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\faces.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Faces.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\faces.pdf.masked"), dwFlags=0x2) returned 1 [0166.159] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\pointers.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Pointers.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\pointers.pdf.masked"), dwFlags=0x2) returned 1 [0166.197] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\signhere.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\SignHere.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\signhere.pdf.masked"), dwFlags=0x2) returned 1 [0166.399] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\standard.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Standard.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\standard.pdf.masked"), dwFlags=0x2) returned 1 [0166.990] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\standardbusiness.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\StandardBusiness.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\standardbusiness.pdf.masked"), dwFlags=0x2) returned 1 [0166.996] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\*", lpFindFileData=0x38a2f4 | out: lpFindFileData=0x38a2f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7feb61e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xb724e520, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xb724e520, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e20 [0167.198] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\fra\\dynamic.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\Dynamic.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\fra\\dynamic.pdf.masked"), dwFlags=0x2) returned 1 [0167.265] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\fra\\signhere.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\SignHere.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\fra\\signhere.pdf.masked"), dwFlags=0x2) returned 1 [0167.779] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\fra\\standardbusiness.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\StandardBusiness.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\fra\\standardbusiness.pdf.masked"), dwFlags=0x2) returned 1 [0167.785] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\*", lpFindFileData=0x38a2f4 | out: lpFindFileData=0x38a2f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8070aee0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xb79e4b40, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xb79e4b40, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e20 [0168.053] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\dynamic.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Dynamic.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\dynamic.pdf.masked"), dwFlags=0x2) returned 1 [0168.101] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\faces.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Faces.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\faces.pdf.masked"), dwFlags=0x2) returned 1 [0168.179] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\pointers.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Pointers.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\pointers.pdf.masked"), dwFlags=0x2) returned 1 [0168.232] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\signhere.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\SignHere.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\signhere.pdf.masked"), dwFlags=0x2) returned 1 [0168.354] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\standard.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Standard.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\standard.pdf.masked"), dwFlags=0x2) returned 1 [0168.473] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\standardbusiness.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\StandardBusiness.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\standardbusiness.pdf.masked"), dwFlags=0x2) returned 1 [0168.480] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\*", lpFindFileData=0x38a2f4 | out: lpFindFileData=0x38a2f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x806e4d80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xb8096920, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xb8096920, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e20 [0168.588] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\dynamic.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Dynamic.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\dynamic.pdf.masked"), dwFlags=0x2) returned 1 [0168.729] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\faces.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Faces.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\faces.pdf.masked"), dwFlags=0x2) returned 1 [0168.781] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\pointers.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Pointers.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\pointers.pdf.masked"), dwFlags=0x2) returned 1 [0168.828] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\signhere.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\SignHere.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\signhere.pdf.masked"), dwFlags=0x2) returned 1 [0169.014] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\standard.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Standard.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\standard.pdf.masked"), dwFlags=0x2) returned 1 [0169.152] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\standardbusiness.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\StandardBusiness.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\standardbusiness.pdf.masked"), dwFlags=0x2) returned 1 [0169.158] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\*", lpFindFileData=0x38a2f4 | out: lpFindFileData=0x38a2f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fedc340, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xb86fc440, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xb86fc440, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e20 [0169.210] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ita\\dynamic.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\Dynamic.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ita\\dynamic.pdf.masked"), dwFlags=0x2) returned 1 [0169.347] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ita\\signhere.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\SignHere.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ita\\signhere.pdf.masked"), dwFlags=0x2) returned 1 [0169.477] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ita\\standardbusiness.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\StandardBusiness.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ita\\standardbusiness.pdf.masked"), dwFlags=0x2) returned 1 [0169.484] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\*", lpFindFileData=0x38a2f4 | out: lpFindFileData=0x38a2f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff024a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xb8983ba0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xb8983ba0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e20 [0169.536] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\dynamic.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\Dynamic.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\dynamic.pdf.masked"), dwFlags=0x2) returned 1 [0169.612] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\Hanko.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\hanko.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\Hanko.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\hanko.pdf.masked"), dwFlags=0x2) returned 1 [0169.655] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\signhere.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\SignHere.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\signhere.pdf.masked"), dwFlags=0x2) returned 1 [0169.767] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\standardbusiness.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\StandardBusiness.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\standardbusiness.pdf.masked"), dwFlags=0x2) returned 1 [0169.772] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\*", lpFindFileData=0x38a2f4 | out: lpFindFileData=0x38a2f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff024a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xb8c31460, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xb8c31460, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e20 [0169.847] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\dynamic.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Dynamic.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\dynamic.pdf.masked"), dwFlags=0x2) returned 1 [0169.907] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Hanko.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\hanko.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Hanko.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\hanko.pdf.masked"), dwFlags=0x2) returned 1 [0169.963] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\signhere.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\SignHere.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\signhere.pdf.masked"), dwFlags=0x2) returned 1 [0170.111] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\standardbusiness.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\StandardBusiness.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\standardbusiness.pdf.masked"), dwFlags=0x2) returned 1 [0170.117] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\*", lpFindFileData=0x38a2f4 | out: lpFindFileData=0x38a2f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7feb61e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xb8f772a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xb8f772a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e20 [0170.180] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nld\\dynamic.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\Dynamic.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nld\\dynamic.pdf.masked"), dwFlags=0x2) returned 1 [0170.193] SetFilePointerEx (in: hFile=0x80, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38a038 | out: lpNewFilePointer=0x0) returned 1 [0170.231] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nld\\signhere.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\SignHere.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nld\\signhere.pdf.masked"), dwFlags=0x2) returned 1 [0170.329] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nld\\standardbusiness.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\StandardBusiness.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nld\\standardbusiness.pdf.masked"), dwFlags=0x2) returned 1 [0170.336] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\*", lpFindFileData=0x38a2f4 | out: lpFindFileData=0x38a2f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff28600, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xb91b2740, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xb91b2740, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e20 [0170.409] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nor\\dynamic.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\Dynamic.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nor\\dynamic.pdf.masked"), dwFlags=0x2) returned 1 [0170.451] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nor\\signhere.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\SignHere.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nor\\signhere.pdf.masked"), dwFlags=0x2) returned 1 [0170.550] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nor\\standardbusiness.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\StandardBusiness.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nor\\standardbusiness.pdf.masked"), dwFlags=0x2) returned 1 [0170.566] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\*", lpFindFileData=0x38a2f4 | out: lpFindFileData=0x38a2f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x806bec20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xb93c7a80, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xb93c7a80, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e20 [0170.605] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\dynamic.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Dynamic.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\dynamic.pdf.masked"), dwFlags=0x2) returned 1 [0170.689] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\faces.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Faces.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\faces.pdf.masked"), dwFlags=0x2) returned 1 [0170.742] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\pointers.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Pointers.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\pointers.pdf.masked"), dwFlags=0x2) returned 1 [0171.094] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\signhere.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\SignHere.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\signhere.pdf.masked"), dwFlags=0x2) returned 1 [0171.211] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\standard.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Standard.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\standard.pdf.masked"), dwFlags=0x2) returned 1 [0171.282] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\standardbusiness.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\StandardBusiness.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\standardbusiness.pdf.masked"), dwFlags=0x2) returned 1 [0171.287] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\*", lpFindFileData=0x38a2f4 | out: lpFindFileData=0x38a2f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff748c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xb9ac5b20, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xb9ac5b20, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e20 [0171.338] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ptb\\dynamic.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\Dynamic.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ptb\\dynamic.pdf.masked"), dwFlags=0x2) returned 1 [0171.382] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ptb\\signhere.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\SignHere.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ptb\\signhere.pdf.masked"), dwFlags=0x2) returned 1 [0171.507] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ptb\\standardbusiness.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\StandardBusiness.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ptb\\standardbusiness.pdf.masked"), dwFlags=0x2) returned 1 [0171.513] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\*", lpFindFileData=0x38a2f4 | out: lpFindFileData=0x38a2f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80698ac0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xb9cdae60, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xb9cdae60, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e20 [0171.609] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\dynamic.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Dynamic.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\dynamic.pdf.masked"), dwFlags=0x2) returned 1 [0171.645] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\faces.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Faces.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\faces.pdf.masked"), dwFlags=0x2) returned 1 [0171.694] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\pointers.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Pointers.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\pointers.pdf.masked"), dwFlags=0x2) returned 1 [0171.754] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\signhere.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\SignHere.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\signhere.pdf.masked"), dwFlags=0x2) returned 1 [0171.868] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\standard.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Standard.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\standard.pdf.masked"), dwFlags=0x2) returned 1 [0172.065] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\standardbusiness.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\StandardBusiness.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\standardbusiness.pdf.masked"), dwFlags=0x2) returned 1 [0172.072] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\*", lpFindFileData=0x38a2f4 | out: lpFindFileData=0x38a2f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80672960, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xba235fe0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xba235fe0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e20 [0172.132] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\dynamic.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Dynamic.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\dynamic.pdf.masked"), dwFlags=0x2) returned 1 [0172.170] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\faces.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Faces.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\faces.pdf.masked"), dwFlags=0x2) returned 1 [0172.220] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\pointers.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Pointers.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\pointers.pdf.masked"), dwFlags=0x2) returned 1 [0172.263] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\signhere.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\SignHere.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\signhere.pdf.masked"), dwFlags=0x2) returned 1 [0172.376] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\standard.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Standard.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\standard.pdf.masked"), dwFlags=0x2) returned 1 [0172.489] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\standardbusiness.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\StandardBusiness.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\standardbusiness.pdf.masked"), dwFlags=0x2) returned 1 [0172.495] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\*", lpFindFileData=0x38a2f4 | out: lpFindFileData=0x38a2f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8064c800, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xba63a500, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xba63a500, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e20 [0172.540] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\dynamic.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Dynamic.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\dynamic.pdf.masked"), dwFlags=0x2) returned 1 [0172.576] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\faces.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Faces.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\faces.pdf.masked"), dwFlags=0x2) returned 1 [0172.694] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\pointers.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Pointers.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\pointers.pdf.masked"), dwFlags=0x2) returned 1 [0172.846] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\signhere.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\SignHere.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\signhere.pdf.masked"), dwFlags=0x2) returned 1 [0172.963] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\standard.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Standard.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\standard.pdf.masked"), dwFlags=0x2) returned 1 [0173.048] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\standardbusiness.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\StandardBusiness.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\standardbusiness.pdf.masked"), dwFlags=0x2) returned 1 [0173.054] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\*", lpFindFileData=0x38a2f4 | out: lpFindFileData=0x38a2f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8064c800, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xbab95680, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xbab95680, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e20 [0173.175] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\dynamic.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Dynamic.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\dynamic.pdf.masked"), dwFlags=0x2) returned 1 [0173.210] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\faces.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Faces.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\faces.pdf.masked"), dwFlags=0x2) returned 1 [0173.262] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\pointers.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Pointers.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\pointers.pdf.masked"), dwFlags=0x2) returned 1 [0173.345] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\signhere.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\SignHere.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\signhere.pdf.masked"), dwFlags=0x2) returned 1 [0173.472] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\standard.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Standard.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\standard.pdf.masked"), dwFlags=0x2) returned 1 [0173.639] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\standardbusiness.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\StandardBusiness.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\standardbusiness.pdf.masked"), dwFlags=0x2) returned 1 [0173.645] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\*", lpFindFileData=0x38a2f4 | out: lpFindFileData=0x38a2f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f804400, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xbb13cac0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xbb13cac0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e20 [0173.705] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\suo\\dynamic.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\Dynamic.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\suo\\dynamic.pdf.masked"), dwFlags=0x2) returned 1 [0173.747] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\suo\\signhere.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\SignHere.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\suo\\signhere.pdf.masked"), dwFlags=0x2) returned 1 [0173.844] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\suo\\standardbusiness.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\StandardBusiness.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\suo\\standardbusiness.pdf.masked"), dwFlags=0x2) returned 1 [0173.851] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\*", lpFindFileData=0x38a2f4 | out: lpFindFileData=0x38a2f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff024a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xbb32bca0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xbb32bca0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e20 [0173.909] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sve\\dynamic.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\Dynamic.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sve\\dynamic.pdf.masked"), dwFlags=0x2) returned 1 [0173.954] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sve\\signhere.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\SignHere.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sve\\signhere.pdf.masked"), dwFlags=0x2) returned 1 [0174.057] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sve\\standardbusiness.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\StandardBusiness.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sve\\standardbusiness.pdf.masked"), dwFlags=0x2) returned 1 [0174.064] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\*", lpFindFileData=0x38a2f4 | out: lpFindFileData=0x38a2f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x806266a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xbb51ae80, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xbb51ae80, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e20 [0174.122] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\dynamic.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Dynamic.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\dynamic.pdf.masked"), dwFlags=0x2) returned 1 [0174.158] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\faces.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Faces.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\faces.pdf.masked"), dwFlags=0x2) returned 1 [0174.209] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\pointers.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Pointers.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\pointers.pdf.masked"), dwFlags=0x2) returned 1 [0174.250] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\signhere.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\SignHere.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\signhere.pdf.masked"), dwFlags=0x2) returned 1 [0174.366] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\standard.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Standard.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\standard.pdf.masked"), dwFlags=0x2) returned 1 [0174.585] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\standardbusiness.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\StandardBusiness.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\standardbusiness.pdf.masked"), dwFlags=0x2) returned 1 [0174.590] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\*", lpFindFileData=0x38a2f4 | out: lpFindFileData=0x38a2f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80600540, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xbba29d40, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xbba29d40, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e20 [0174.791] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\dynamic.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Dynamic.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\dynamic.pdf.masked"), dwFlags=0x2) returned 1 [0174.862] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\faces.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Faces.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\faces.pdf.masked"), dwFlags=0x2) returned 1 [0174.916] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\pointers.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Pointers.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\pointers.pdf.masked"), dwFlags=0x2) returned 1 [0174.965] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\signhere.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\SignHere.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\signhere.pdf.masked"), dwFlags=0x2) returned 1 [0175.100] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\standard.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Standard.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\standard.pdf.masked"), dwFlags=0x2) returned 1 [0175.540] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\standardbusiness.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\StandardBusiness.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\standardbusiness.pdf.masked"), dwFlags=0x2) returned 1 [0175.694] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\Words.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\words.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\Words.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\words.pdf.masked"), dwFlags=0x2) returned 1 [0175.710] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xbc4e0040, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xbc4e0040, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0175.714] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xbc4e0040, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xbc4e0040, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0175.719] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.suo"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.SUO.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.suo.masked"), dwFlags=0x2) returned 1 [0175.735] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.suo"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.SUO.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.suo.masked"), dwFlags=0x2) returned 1 [0175.742] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.suo"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.SUO.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.suo.masked"), dwFlags=0x2) returned 1 [0175.748] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.suo"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.SUO.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.suo.masked"), dwFlags=0x2) returned 1 [0175.753] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d82ddc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xbc552460, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xbc552460, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0175.757] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d853f20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xbc552460, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xbc552460, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0175.761] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d82ddc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xbc552460, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xbc552460, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0175.772] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d82ddc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xbc5785c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xbc5785c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0175.777] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d807c60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xbc5785c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xbc5785c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0175.781] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d807c60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xbc59e720, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xbc59e720, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0175.785] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d807c60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xbc59e720, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xbc59e720, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0175.790] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7e1b00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xbc59e720, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xbc59e720, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0175.794] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7e1b00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xbc59e720, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xbc59e720, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0175.798] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7e1b00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xbc5c4880, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xbc5c4880, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0175.803] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7dbbfec0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xbc5c4880, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xbc5c4880, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0175.807] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\prc\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7dbbfec0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xbc5c4880, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xbc5c4880, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0175.809] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\pmd.cer" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\pmd.cer"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\pmd.cer.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\pmd.cer.masked"), dwFlags=0x2) returned 1 [0175.814] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\RTC.der" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\rtc.der"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\RTC.der.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\rtc.der.masked"), dwFlags=0x2) returned 1 [0175.820] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Services\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x820095e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xbc5ea9e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xbc5ea9e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0175.860] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Services\\Services.cfg" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\services\\services.cfg"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Services\\Services.cfg.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\services\\services.cfg.masked"), dwFlags=0x2) returned 1 [0175.866] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\SPPlugins\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ffc0b80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xbc65ce00, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xbc65ce00, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0175.871] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x801fc020, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xbc65ce00, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xbc65ce00, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0175.875] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\add_reviewer.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\add_reviewer.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\add_reviewer.gif.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\add_reviewer.gif.masked"), dwFlags=0x2) returned 1 [0175.879] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\bl.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\bl.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\bl.gif.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\bl.gif.masked"), dwFlags=0x2) returned 1 [0175.881] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\br.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\br.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\br.gif.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\br.gif.masked"), dwFlags=0x2) returned 1 [0175.885] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\create_form.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\create_form.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\create_form.gif.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\create_form.gif.masked"), dwFlags=0x2) returned 1 [0175.889] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\distribute_form.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\distribute_form.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\distribute_form.gif.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\distribute_form.gif.masked"), dwFlags=0x2) returned 1 [0175.893] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\email_all.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\email_all.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\email_all.gif.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\email_all.gif.masked"), dwFlags=0x2) returned 1 [0175.897] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\email_initiator.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\email_initiator.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\email_initiator.gif.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\email_initiator.gif.masked"), dwFlags=0x2) returned 1 [0175.900] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\ended_review_or_form.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\ended_review_or_form.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\ended_review_or_form.gif.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\ended_review_or_form.gif.masked"), dwFlags=0x2) returned 1 [0175.904] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\end_review.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\end_review.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\end_review.gif.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\end_review.gif.masked"), dwFlags=0x2) returned 1 [0175.908] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\forms_distributed.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\forms_distributed.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\forms_distributed.gif.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\forms_distributed.gif.masked"), dwFlags=0x2) returned 1 [0175.912] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\forms_received.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\forms_received.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\forms_received.gif.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\forms_received.gif.masked"), dwFlags=0x2) returned 1 [0175.915] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\forms_super.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\forms_super.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\forms_super.gif.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\forms_super.gif.masked"), dwFlags=0x2) returned 1 [0175.923] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\form_responses.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\form_responses.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\form_responses.gif.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\form_responses.gif.masked"), dwFlags=0x2) returned 1 [0175.926] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\info.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\info.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\info.gif.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\info.gif.masked"), dwFlags=0x2) returned 1 [0176.009] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\main.css" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\main.css"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\main.css.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\main.css.masked"), dwFlags=0x2) returned 1 [0176.014] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\open_original_form.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\open_original_form.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\open_original_form.gif.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\open_original_form.gif.masked"), dwFlags=0x2) returned 1 [0176.017] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\pdf.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\pdf.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\pdf.gif.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\pdf.gif.masked"), dwFlags=0x2) returned 1 [0176.022] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviewers.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\reviewers.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviewers.gif.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\reviewers.gif.masked"), dwFlags=0x2) returned 1 [0176.025] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_joined.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\reviews_joined.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_joined.gif.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\reviews_joined.gif.masked"), dwFlags=0x2) returned 1 [0176.030] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_sent.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\reviews_sent.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_sent.gif.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\reviews_sent.gif.masked"), dwFlags=0x2) returned 1 [0176.034] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_super.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\reviews_super.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_super.gif.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\reviews_super.gif.masked"), dwFlags=0x2) returned 1 [0176.038] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_browser.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\review_browser.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_browser.gif.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\review_browser.gif.masked"), dwFlags=0x2) returned 1 [0176.041] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_email.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\review_email.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_email.gif.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\review_email.gif.masked"), dwFlags=0x2) returned 1 [0176.045] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_same_reviewers.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\review_same_reviewers.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_same_reviewers.gif.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\review_same_reviewers.gif.masked"), dwFlags=0x2) returned 1 [0176.049] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_shared.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\review_shared.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_shared.gif.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\review_shared.gif.masked"), dwFlags=0x2) returned 1 [0176.051] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\rss.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\rss.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\rss.gif.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\rss.gif.masked"), dwFlags=0x2) returned 1 [0176.054] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_issue.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\server_issue.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_issue.gif.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\server_issue.gif.masked"), dwFlags=0x2) returned 1 [0176.058] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_lg.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\server_lg.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_lg.gif.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\server_lg.gif.masked"), dwFlags=0x2) returned 1 [0176.062] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_ok.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\server_ok.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_ok.gif.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\server_ok.gif.masked"), dwFlags=0x2) returned 1 [0176.065] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\stop_collection_data.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\stop_collection_data.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\stop_collection_data.gif.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\stop_collection_data.gif.masked"), dwFlags=0x2) returned 1 [0176.068] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\submission_history.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\submission_history.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\submission_history.gif.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\submission_history.gif.masked"), dwFlags=0x2) returned 1 [0176.071] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\tl.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\tl.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\tl.gif.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\tl.gif.masked"), dwFlags=0x2) returned 1 [0176.074] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\tr.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\tr.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\tr.gif.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\tr.gif.masked"), dwFlags=0x2) returned 1 [0176.077] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\trash.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\trash.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\trash.gif.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\trash.gif.masked"), dwFlags=0x2) returned 1 [0176.080] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOffNotificationInAcrobat.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\turnoffnotificationinacrobat.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOffNotificationInAcrobat.gif.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\turnoffnotificationinacrobat.gif.masked"), dwFlags=0x2) returned 1 [0176.084] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOffNotificationInTray.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\turnoffnotificationintray.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOffNotificationInTray.gif.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\turnoffnotificationintray.gif.masked"), dwFlags=0x2) returned 1 [0176.088] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOnNotificationInAcrobat.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\turnonnotificationinacrobat.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOnNotificationInAcrobat.gif.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\turnonnotificationinacrobat.gif.masked"), dwFlags=0x2) returned 1 [0176.091] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOnNotificationInTray.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\turnonnotificationintray.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOnNotificationInTray.gif.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\turnonnotificationintray.gif.masked"), dwFlags=0x2) returned 1 [0176.094] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\warning.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\warning.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\warning.gif.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\warning.gif.masked"), dwFlags=0x2) returned 1 [0176.105] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xbc8982a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xbc8982a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0176.109] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f934f00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xbc8be400, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xbc8be400, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0176.118] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f556b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x800a53c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x800a53c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x180, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0176.135] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\ENUtxt.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\enutxt.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\ENUtxt.pdf.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\enutxt.pdf.masked"), dwFlags=0x2) returned 1 [0176.141] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f556b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xbc90a6c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xbc90a6c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0176.146] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\PFM\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f556b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xbc90a6c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xbc90a6c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0176.150] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xbc90a6c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xbc90a6c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0176.155] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7dcf09c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xbc930820, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xbc930820, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0176.238] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar.txt.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar.txt.masked"), dwFlags=0x2) returned 1 [0176.364] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_AE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_ae.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_AE.txt.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_ae.txt.masked"), dwFlags=0x2) returned 1 [0176.433] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_BH.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_bh.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_BH.txt.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_bh.txt.masked"), dwFlags=0x2) returned 1 [0176.497] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_DZ.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_dz.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_DZ.txt.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_dz.txt.masked"), dwFlags=0x2) returned 1 [0176.599] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_EG.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_eg.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_EG.txt.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_eg.txt.masked"), dwFlags=0x2) returned 1 [0176.692] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IN.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_in.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IN.txt.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_in.txt.masked"), dwFlags=0x2) returned 1 [0176.738] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IQ.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_iq.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IQ.txt.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_iq.txt.masked"), dwFlags=0x2) returned 1 [0176.803] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_JO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_jo.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_JO.txt.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_jo.txt.masked"), dwFlags=0x2) returned 1 [0176.861] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_KW.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_kw.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_KW.txt.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_kw.txt.masked"), dwFlags=0x2) returned 1 [0176.980] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LB.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_lb.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LB.txt.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_lb.txt.masked"), dwFlags=0x2) returned 1 [0177.033] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LY.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_ly.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LY.txt.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_ly.txt.masked"), dwFlags=0x2) returned 1 [0177.164] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_MA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_ma.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_MA.txt.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_ma.txt.masked"), dwFlags=0x2) returned 1 [0177.256] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_OM.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_om.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_OM.txt.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_om.txt.masked"), dwFlags=0x2) returned 1 [0177.290] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_QA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_qa.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_QA.txt.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_qa.txt.masked"), dwFlags=0x2) returned 1 [0177.322] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_sa.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SA.txt.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_sa.txt.masked"), dwFlags=0x2) returned 1 [0177.353] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SD.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_sd.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SD.txt.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_sd.txt.masked"), dwFlags=0x2) returned 1 [0177.386] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SY.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_sy.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SY.txt.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_sy.txt.masked"), dwFlags=0x2) returned 1 [0177.423] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_TN.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_tn.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_TN.txt.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_tn.txt.masked"), dwFlags=0x2) returned 1 [0177.454] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_YE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_ye.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_YE.txt.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_ye.txt.masked"), dwFlags=0x2) returned 1 [0177.486] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.bg.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg.txt.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.bg.txt.masked"), dwFlags=0x2) returned 1 [0177.517] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg_BG.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.bg_bg.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg_BG.txt.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.bg_bg.txt.masked"), dwFlags=0x2) returned 1 [0177.548] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ca.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca.txt.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ca.txt.masked"), dwFlags=0x2) returned 1 [0177.579] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ca_es.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES.txt.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ca_es.txt.masked"), dwFlags=0x2) returned 1 [0177.611] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ca_es_preeuro.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES_PREEURO.txt.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ca_es_preeuro.txt.masked"), dwFlags=0x2) returned 1 [0177.653] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.cs.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs.txt.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.cs.txt.masked"), dwFlags=0x2) returned 1 [0177.764] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs_CZ.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.cs_cz.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs_CZ.txt.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.cs_cz.txt.masked"), dwFlags=0x2) returned 1 [0177.796] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.da.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da.txt.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.da.txt.masked"), dwFlags=0x2) returned 1 [0177.832] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da_DK.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.da_dk.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da_DK.txt.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.da_dk.txt.masked"), dwFlags=0x2) returned 1 [0177.870] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_CH.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.de_ch.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_CH.txt.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.de_ch.txt.masked"), dwFlags=0x2) returned 1 [0177.902] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.de_de.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE.txt.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.de_de.txt.masked"), dwFlags=0x2) returned 1 [0177.937] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.de_de_preeuro.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE_PREEURO.txt.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.de_de_preeuro.txt.masked"), dwFlags=0x2) returned 1 [0177.969] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.el.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el.txt.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.el.txt.masked"), dwFlags=0x2) returned 1 [0178.000] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.el_gr.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR.txt.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.el_gr.txt.masked"), dwFlags=0x2) returned 1 [0178.030] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.el_gr_preeuro.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR_PREEURO.txt.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.el_gr_preeuro.txt.masked"), dwFlags=0x2) returned 1 [0178.078] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_CA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_ca.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_CA.txt.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_ca.txt.masked"), dwFlags=0x2) returned 1 [0178.110] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_gb.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB.txt.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_gb.txt.masked"), dwFlags=0x2) returned 1 [0178.142] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB_EURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_gb_euro.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB_EURO.txt.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_gb_euro.txt.masked"), dwFlags=0x2) returned 1 [0178.173] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_us.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US.txt.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_us.txt.masked"), dwFlags=0x2) returned 1 [0178.204] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US_POSIX.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_us_posix.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US_POSIX.txt.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_us_posix.txt.masked"), dwFlags=0x2) returned 1 [0178.235] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es.txt.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es.txt.masked"), dwFlags=0x2) returned 1 [0178.269] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_AR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_ar.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_AR.txt.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_ar.txt.masked"), dwFlags=0x2) returned 1 [0178.300] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_BO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_bo.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_BO.txt.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_bo.txt.masked"), dwFlags=0x2) returned 1 [0178.332] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CL.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_cl.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CL.txt.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_cl.txt.masked"), dwFlags=0x2) returned 1 [0178.363] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_co.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CO.txt.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_co.txt.masked"), dwFlags=0x2) returned 1 [0178.395] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_cr.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CR.txt.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_cr.txt.masked"), dwFlags=0x2) returned 1 [0178.432] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_DO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_do.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_DO.txt.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_do.txt.masked"), dwFlags=0x2) returned 1 [0178.466] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_EC.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_ec.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_EC.txt.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_ec.txt.masked"), dwFlags=0x2) returned 1 [0178.497] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_es.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES.txt.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_es.txt.masked"), dwFlags=0x2) returned 1 [0178.530] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_es_preeuro.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES_PREEURO.txt.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_es_preeuro.txt.masked"), dwFlags=0x2) returned 1 [0178.563] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_GT.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_gt.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_GT.txt.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_gt.txt.masked"), dwFlags=0x2) returned 1 [0178.595] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_HN.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_hn.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_HN.txt.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_hn.txt.masked"), dwFlags=0x2) returned 1 [0178.628] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_MX.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_mx.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_MX.txt.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_mx.txt.masked"), dwFlags=0x2) returned 1 [0178.659] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_NI.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_ni.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_NI.txt.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_ni.txt.masked"), dwFlags=0x2) returned 1 [0178.692] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_pa.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PA.txt.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_pa.txt.masked"), dwFlags=0x2) returned 1 [0178.733] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_pe.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PE.txt.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_pe.txt.masked"), dwFlags=0x2) returned 1 [0178.765] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_pr.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PR.txt.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_pr.txt.masked"), dwFlags=0x2) returned 1 [0178.795] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PY.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_py.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PY.txt.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_py.txt.masked"), dwFlags=0x2) returned 1 [0178.827] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_SV.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_sv.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_SV.txt.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_sv.txt.masked"), dwFlags=0x2) returned 1 [0178.859] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_US.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_us.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_US.txt.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_us.txt.masked"), dwFlags=0x2) returned 1 [0178.891] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_UY.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_uy.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_UY.txt.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_uy.txt.masked"), dwFlags=0x2) returned 1 [0178.921] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_VE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_ve.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_VE.txt.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_ve.txt.masked"), dwFlags=0x2) returned 1 [0178.953] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es__TRADITIONAL.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es__traditional.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es__TRADITIONAL.txt.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es__traditional.txt.masked"), dwFlags=0x2) returned 1 [0178.983] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.et.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et.txt.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.et.txt.masked"), dwFlags=0x2) returned 1 [0179.015] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et_EE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.et_ee.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et_EE.txt.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.et_ee.txt.masked"), dwFlags=0x2) returned 1 [0179.047] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fi.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi.txt.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fi.txt.masked"), dwFlags=0x2) returned 1 [0179.079] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fi_fi.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI.txt.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fi_fi.txt.masked"), dwFlags=0x2) returned 1 [0179.110] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fi_fi_preeuro.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI_PREEURO.txt.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fi_fi_preeuro.txt.masked"), dwFlags=0x2) returned 1 [0179.143] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_CA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fr_ca.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_CA.txt.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fr_ca.txt.masked"), dwFlags=0x2) returned 1 [0179.177] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fr_fr.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR.txt.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fr_fr.txt.masked"), dwFlags=0x2) returned 1 [0179.209] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fr_fr_preeuro.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR_PREEURO.txt.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fr_fr_preeuro.txt.masked"), dwFlags=0x2) returned 1 [0179.238] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.he.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he.txt.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.he.txt.masked"), dwFlags=0x2) returned 1 [0179.267] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he_IL.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.he_il.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he_IL.txt.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.he_il.txt.masked"), dwFlags=0x2) returned 1 [0179.299] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.hr.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr.txt.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.hr.txt.masked"), dwFlags=0x2) returned 1 [0179.330] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr_HR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.hr_hr.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr_HR.txt.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.hr_hr.txt.masked"), dwFlags=0x2) returned 1 [0179.363] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.hu.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu.txt.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.hu.txt.masked"), dwFlags=0x2) returned 1 [0179.396] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu_HU.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.hu_hu.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu_HU.txt.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.hu_hu.txt.masked"), dwFlags=0x2) returned 1 [0179.434] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.it.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it.txt.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.it.txt.masked"), dwFlags=0x2) returned 1 [0179.467] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_CH.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.it_ch.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_CH.txt.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.it_ch.txt.masked"), dwFlags=0x2) returned 1 [0179.498] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.it_it.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT.txt.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.it_it.txt.masked"), dwFlags=0x2) returned 1 [0179.529] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.it_it_preeuro.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT_PREEURO.txt.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.it_it_preeuro.txt.masked"), dwFlags=0x2) returned 1 [0179.559] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ja.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja.txt.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ja.txt.masked"), dwFlags=0x2) returned 1 [0179.590] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ja_jp.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP.txt.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ja_jp.txt.masked"), dwFlags=0x2) returned 1 [0179.657] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP_TRADITIONAL.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ja_jp_traditional.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP_TRADITIONAL.txt.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ja_jp_traditional.txt.masked"), dwFlags=0x2) returned 1 [0179.747] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ko.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko.txt.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ko.txt.masked"), dwFlags=0x2) returned 1 [0179.776] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko_KR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ko_kr.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko_KR.txt.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ko_kr.txt.masked"), dwFlags=0x2) returned 1 [0179.809] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.lt.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt.txt.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.lt.txt.masked"), dwFlags=0x2) returned 1 [0179.839] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt_LT.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.lt_lt.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt_LT.txt.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.lt_lt.txt.masked"), dwFlags=0x2) returned 1 [0179.870] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.lv.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv.txt.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.lv.txt.masked"), dwFlags=0x2) returned 1 [0179.900] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv_LV.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.lv_lv.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv_LV.txt.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.lv_lv.txt.masked"), dwFlags=0x2) returned 1 [0179.933] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nb.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb.txt.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nb.txt.masked"), dwFlags=0x2) returned 1 [0179.964] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb_NO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nb_no.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb_NO.txt.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nb_no.txt.masked"), dwFlags=0x2) returned 1 [0179.996] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl.txt.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl.txt.masked"), dwFlags=0x2) returned 1 [0180.028] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl_be.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE.txt.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl_be.txt.masked"), dwFlags=0x2) returned 1 [0180.059] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl_be_preeuro.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE_PREEURO.txt.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl_be_preeuro.txt.masked"), dwFlags=0x2) returned 1 [0180.091] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl_nl.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL.txt.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl_nl.txt.masked"), dwFlags=0x2) returned 1 [0180.123] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl_nl_preeuro.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL_PREEURO.txt.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl_nl_preeuro.txt.masked"), dwFlags=0x2) returned 1 [0180.154] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nn_NO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nn_no.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nn_NO.txt.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nn_no.txt.masked"), dwFlags=0x2) returned 1 [0180.186] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pl.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl.txt.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pl.txt.masked"), dwFlags=0x2) returned 1 [0180.218] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl_PL.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pl_pl.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl_PL.txt.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pl_pl.txt.masked"), dwFlags=0x2) returned 1 [0180.250] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_BR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pt_br.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_BR.txt.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pt_br.txt.masked"), dwFlags=0x2) returned 1 [0180.281] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pt_pt.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT.txt.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pt_pt.txt.masked"), dwFlags=0x2) returned 1 [0180.311] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pt_pt_preeuro.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT_PREEURO.txt.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pt_pt_preeuro.txt.masked"), dwFlags=0x2) returned 1 [0180.344] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ro.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro.txt.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ro.txt.masked"), dwFlags=0x2) returned 1 [0180.375] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro_RO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ro_ro.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro_RO.txt.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ro_ro.txt.masked"), dwFlags=0x2) returned 1 [0180.417] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ru.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru.txt.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ru.txt.masked"), dwFlags=0x2) returned 1 [0180.451] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_RU.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ru_ru.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_RU.txt.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ru_ru.txt.masked"), dwFlags=0x2) returned 1 [0180.483] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_UA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ru_ua.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_UA.txt.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ru_ua.txt.masked"), dwFlags=0x2) returned 1 [0180.515] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sk.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk.txt.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sk.txt.masked"), dwFlags=0x2) returned 1 [0180.546] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk_SK.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sk_sk.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk_SK.txt.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sk_sk.txt.masked"), dwFlags=0x2) returned 1 [0180.578] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sl.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl.txt.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sl.txt.masked"), dwFlags=0x2) returned 1 [0180.609] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl_SI.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sl_si.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl_SI.txt.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sl_si.txt.masked"), dwFlags=0x2) returned 1 [0180.642] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sv.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv.txt.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sv.txt.masked"), dwFlags=0x2) returned 1 [0180.673] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_FI.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sv_fi.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_FI.txt.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sv_fi.txt.masked"), dwFlags=0x2) returned 1 [0180.733] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_SE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sv_se.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_SE.txt.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sv_se.txt.masked"), dwFlags=0x2) returned 1 [0180.773] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.tr.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr.txt.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.tr.txt.masked"), dwFlags=0x2) returned 1 [0180.805] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr_TR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.tr_tr.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr_TR.txt.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.tr_tr.txt.masked"), dwFlags=0x2) returned 1 [0180.837] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.uk.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk.txt.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.uk.txt.masked"), dwFlags=0x2) returned 1 [0180.870] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk_UA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.uk_ua.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk_UA.txt.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.uk_ua.txt.masked"), dwFlags=0x2) returned 1 [0180.899] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_CN.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.zh_cn.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_CN.txt.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.zh_cn.txt.masked"), dwFlags=0x2) returned 1 [0180.927] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.zh_tw.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW.txt.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.zh_tw.txt.masked"), dwFlags=0x2) returned 1 [0180.958] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW_STROKE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.zh_tw_stroke.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW_STROKE.txt.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.zh_tw_stroke.txt.masked"), dwFlags=0x2) returned 1 [0180.965] GetFileType (hFile=0x74) returned 0x1 [0180.970] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xbf702fa0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xbf702fa0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0180.975] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xbf702fa0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xbf702fa0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0180.980] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\*", lpFindFileData=0x38a2f4 | out: lpFindFileData=0x38a2f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xbf729100, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xbf729100, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e20 [0180.988] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\SaslPrep\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81d5bd20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xbf729100, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xbf729100, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0181.003] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\SaslPrep\\SaslPrepProfile_norm_bidi.spp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\saslprep\\saslprepprofile_norm_bidi.spp"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\SaslPrep\\SaslPrepProfile_norm_bidi.spp.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\saslprep\\saslprepprofile_norm_bidi.spp.masked"), dwFlags=0x2) returned 1 [0181.012] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x833608a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xbf7753c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xbf7753c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0181.015] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x833608a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xbf7753c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xbf7753c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0181.020] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x834dd660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xbf7753c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xbf7753c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0181.235] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU\\icudt26l.dat" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\icu\\icudt26l.dat"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU\\icudt26l.dat.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\icu\\icudt26l.dat.masked"), dwFlags=0x2) returned 1 [0181.241] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x833608a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xbf9b0860, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xbf9b0860, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0181.245] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\*", lpFindFileData=0x38a2f4 | out: lpFindFileData=0x38a2f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x834450e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xbf9b0860, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xbf9b0860, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e20 [0181.792] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\HKSCS.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\hkscs.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\HKSCS.txt.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\hkscs.txt.masked"), dwFlags=0x2) returned 1 [0182.011] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\Japanese83pv.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\japanese83pv.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\Japanese83pv.txt.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\japanese83pv.txt.masked"), dwFlags=0x2) returned 1 [0182.376] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\JISX0208.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\jisx0208.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\JISX0208.txt.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\jisx0208.txt.masked"), dwFlags=0x2) returned 1 [0182.560] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\JISX0213.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\jisx0213.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\JISX0213.txt.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\jisx0213.txt.masked"), dwFlags=0x2) returned 1 [0182.574] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\symbol.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\symbol.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\symbol.txt.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\symbol.txt.masked"), dwFlags=0x2) returned 1 [0182.589] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\zdingbat.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\zdingbat.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\zdingbat.txt.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\zdingbat.txt.masked"), dwFlags=0x2) returned 1 [0182.596] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\*", lpFindFileData=0x38a2f4 | out: lpFindFileData=0x38a2f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x834450e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xc067bea0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xc067bea0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e20 [0182.656] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ARABIC.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\arabic.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ARABIC.TXT.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\arabic.txt.masked"), dwFlags=0x2) returned 1 [0182.673] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CENTEURO.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\centeuro.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CENTEURO.TXT.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\centeuro.txt.masked"), dwFlags=0x2) returned 1 [0182.923] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CHINSIMP.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\chinsimp.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CHINSIMP.TXT.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\chinsimp.txt.masked"), dwFlags=0x2) returned 1 [0183.310] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CHINTRAD.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\chintrad.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CHINTRAD.TXT.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\chintrad.txt.masked"), dwFlags=0x2) returned 1 [0183.333] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CORPCHAR.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\corpchar.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CORPCHAR.TXT.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\corpchar.txt.masked"), dwFlags=0x2) returned 1 [0183.351] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CROATIAN.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\croatian.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CROATIAN.TXT.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\croatian.txt.masked"), dwFlags=0x2) returned 1 [0183.368] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CYRILLIC.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\cyrillic.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CYRILLIC.TXT.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\cyrillic.txt.masked"), dwFlags=0x2) returned 1 [0183.424] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\FARSI.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\farsi.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\FARSI.TXT.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\farsi.txt.masked"), dwFlags=0x2) returned 1 [0183.441] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\GREEK.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\greek.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\GREEK.TXT.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\greek.txt.masked"), dwFlags=0x2) returned 1 [0183.468] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\HEBREW.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\hebrew.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\HEBREW.TXT.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\hebrew.txt.masked"), dwFlags=0x2) returned 1 [0183.486] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ICELAND.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\iceland.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ICELAND.TXT.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\iceland.txt.masked"), dwFlags=0x2) returned 1 [0183.873] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\JAPANESE.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\japanese.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\JAPANESE.TXT.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\japanese.txt.masked"), dwFlags=0x2) returned 1 [0184.425] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\KOREAN.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\korean.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\KOREAN.TXT.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\korean.txt.masked"), dwFlags=0x2) returned 1 [0184.443] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMAN.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\roman.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMAN.TXT.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\roman.txt.masked"), dwFlags=0x2) returned 1 [0184.461] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMANIAN.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\romanian.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMANIAN.TXT.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\romanian.txt.masked"), dwFlags=0x2) returned 1 [0184.479] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\SYMBOL.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\symbol.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\SYMBOL.TXT.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\symbol.txt.masked"), dwFlags=0x2) returned 1 [0184.498] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\THAI.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\thai.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\THAI.TXT.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\thai.txt.masked"), dwFlags=0x2) returned 1 [0184.513] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\TURKISH.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\turkish.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\TURKISH.TXT.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\turkish.txt.masked"), dwFlags=0x2) returned 1 [0184.579] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\UKRAINE.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\ukraine.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\UKRAINE.TXT.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\ukraine.txt.masked"), dwFlags=0x2) returned 1 [0184.585] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\*", lpFindFileData=0x38a2f4 | out: lpFindFileData=0x38a2f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x833608a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xc1986ea0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xc1986ea0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e20 [0184.598] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1250.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1250.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1250.TXT.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1250.txt.masked"), dwFlags=0x2) returned 1 [0184.653] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1251.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1251.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1251.TXT.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1251.txt.masked"), dwFlags=0x2) returned 1 [0184.705] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1252.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1252.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1252.TXT.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1252.txt.masked"), dwFlags=0x2) returned 1 [0184.743] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1253.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1253.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1253.TXT.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1253.txt.masked"), dwFlags=0x2) returned 1 [0184.803] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1254.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1254.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1254.TXT.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1254.txt.masked"), dwFlags=0x2) returned 1 [0184.816] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1255.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1255.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1255.TXT.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1255.txt.masked"), dwFlags=0x2) returned 1 [0184.829] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1256.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1256.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1256.TXT.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1256.txt.masked"), dwFlags=0x2) returned 1 [0184.858] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1257.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1257.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1257.TXT.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1257.txt.masked"), dwFlags=0x2) returned 1 [0184.881] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1258.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1258.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1258.TXT.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1258.txt.masked"), dwFlags=0x2) returned 1 [0184.919] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP874.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp874.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP874.TXT.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp874.txt.masked"), dwFlags=0x2) returned 1 [0185.377] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP932.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp932.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP932.TXT.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp932.txt.masked"), dwFlags=0x2) returned 1 [0186.018] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP936.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp936.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP936.TXT.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp936.txt.masked"), dwFlags=0x2) returned 1 [0186.543] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP949.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp949.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP949.TXT.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp949.txt.masked"), dwFlags=0x2) returned 1 [0187.054] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP950.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp950.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP950.TXT.masked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp950.txt.masked"), dwFlags=0x2) returned 1 [0187.060] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf66ca0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xc312e940, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xc312e940, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0187.064] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf66ca0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xc312e940, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xc312e940, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0187.070] GetFileType (hFile=0x64) returned 0x1 [0187.071] GetFileType (hFile=0x64) returned 0x1 [0187.072] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\*", lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xc312e940, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xc312e940, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555c60 [0187.079] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\Adobe\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf1a9e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xc3154aa0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xc3154aa0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555ca0 [0187.084] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf1a9e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xc3154aa0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xc3154aa0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0187.090] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf1a9e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f24da0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f24da0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x180, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0187.096] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\Adobe\\ARM\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8386f760, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xc317ac00, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xc317ac00, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0187.099] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8386f760, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xc317ac00, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xc317ac00, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0187.103] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xc317ac00, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xc317ac00, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0187.108] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ca_ES\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xc31a0d60, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xc31a0d60, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0187.112] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\cs_CZ\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xc31a0d60, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xc31a0d60, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0187.116] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\da_DK\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xc31a0d60, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xc31a0d60, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0187.121] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\de_DE\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5a6660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xc31a0d60, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xc31a0d60, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0187.125] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\en_US\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5a6660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xc31c6ec0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xc31c6ec0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0187.130] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\es_ES\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xc31c6ec0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xc31c6ec0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0187.133] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\eu_ES\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xc31c6ec0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xc31c6ec0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0187.138] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\fi_FI\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xc31ed020, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xc31ed020, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0187.142] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\fr_FR\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xc31ed020, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xc31ed020, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0187.145] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\hr_HR\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xc31ed020, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xc31ed020, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0187.153] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\hu_HU\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xc3213180, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xc3213180, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0187.157] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\it_IT\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5a6660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xc3213180, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xc3213180, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0187.161] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ja_JP\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5a6660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xc3213180, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xc3213180, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0187.165] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ko_KR\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5a6660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xc3213180, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xc3213180, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0187.171] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\nb_NO\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5a6660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xc32392e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xc32392e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0187.174] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\nl_NL\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xc32392e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xc32392e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0187.182] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\pl_PL\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xc32392e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xc32392e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0187.186] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\pt_BR\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xc325f440, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xc325f440, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0187.190] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ro_RO\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xc325f440, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xc325f440, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0187.194] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ru_RU\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xc325f440, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xc325f440, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0187.198] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sk_SK\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xc325f440, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xc325f440, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0187.202] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sl_SI\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xc32855a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xc32855a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0187.207] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sv_SE\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xc32855a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xc32855a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0187.211] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\tr_TR\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xc32855a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xc32855a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0187.216] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\uk_UA\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xc32ab700, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xc32ab700, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0187.220] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\zh_CN\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xc32ab700, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xc32ab700, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0187.224] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\zh_TW\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xc32ab700, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xc32ab700, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0187.228] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\Java\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x801ae160, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xc32ab700, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xc32ab700, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555ca0 [0187.231] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\Java\\Java Update\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x801d42c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xc32d1860, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xc32d1860, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0187.234] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Common Files\\Java\\Java Update\\task.xml" (normalized: "c:\\program files (x86)\\common files\\java\\java update\\task.xml"), lpNewFileName="C:\\\\Program Files (x86)\\Common Files\\Java\\Java Update\\task.xml.masked" (normalized: "c:\\program files (x86)\\common files\\java\\java update\\task.xml.masked"), dwFlags=0x2) returned 1 [0187.240] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Common Files\\Java\\Java Update\\task64.xml" (normalized: "c:\\program files (x86)\\common files\\java\\java update\\task64.xml"), lpNewFileName="C:\\\\Program Files (x86)\\Common Files\\Java\\Java Update\\task64.xml.masked" (normalized: "c:\\program files (x86)\\common files\\java\\java update\\task64.xml.masked"), dwFlags=0x2) returned 1 [0187.241] GetFileType (hFile=0x68) returned 0x1 [0187.243] GetFileType (hFile=0x68) returned 0x1 [0187.244] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xc32d1860, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xc32d1860, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555ca0 [0187.246] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\DAO\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xc32f79c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xc32f79c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0187.251] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed5e6b0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc32f79c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xc32f79c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0187.254] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1028\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed5e6b0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc32f79c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xc32f79c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0187.256] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1031\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed5e6b0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc32f79c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xc32f79c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0187.259] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1033\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed84810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc32f79c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xc32f79c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0187.264] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1036\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed84810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc331db20, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xc331db20, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0187.266] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1040\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed84810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc331db20, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xc331db20, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0187.269] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1041\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed84810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc331db20, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xc331db20, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0187.271] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1042\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc331db20, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xc331db20, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0187.274] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1046\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc331db20, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xc331db20, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0187.277] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1049\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc331db20, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xc331db20, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0187.282] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\2052\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed5e6b0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc3343c80, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xc3343c80, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0187.284] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\3082\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed84810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc3343c80, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xc3343c80, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0187.288] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xc3343c80, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xc3343c80, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0187.291] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\1.0\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xc3343c80, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xc3343c80, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0187.293] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\1.7\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xc3369de0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xc3369de0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0187.299] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\en-US\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xc3369de0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xc3369de0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0187.302] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\HWRCustomization\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21d9876, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xc3369de0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xc3369de0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0187.306] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\MSEnv\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x522b67d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc3369de0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xc3369de0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0187.311] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\MSEnv\\PublicAssemblies\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x522b67d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc338ff40, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xc338ff40, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0187.316] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\MSInfo\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xc338ff40, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xc338ff40, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0187.318] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\MSInfo\\en-US\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xc338ff40, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xc338ff40, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0187.321] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7a735b0, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xc338ff40, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xc338ff40, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0187.325] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\1033\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19b36970, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc33b60a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xc33b60a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0187.328] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\Cultures\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xad3651a0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc33b60a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xc33b60a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0188.000] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\Cultures\\OFFICE.ODF" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office14\\cultures\\office.odf"), lpNewFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\Cultures\\OFFICE.ODF.masked" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office14\\cultures\\office.odf.masked"), dwFlags=0x2) returned 1 [0188.007] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\Office Setup Controller\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7ae59d0, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xc3a1bbc0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xc3a1bbc0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0188.012] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\Portal\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeefe5e10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc3a41d20, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xc3a41d20, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0188.016] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\Portal\\1033\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeefe5e10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc3a41d20, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xc3a41d20, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0188.020] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xc3a41d20, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xc3a41d20, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0188.029] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xc3a67e80, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xc3a67e80, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0188.031] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv\\en-US\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xc3a67e80, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xc3a67e80, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0188.034] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv\\WksConv\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6e32460, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc3a67e80, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xc3a67e80, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0188.037] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\Triedit\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xc3a67e80, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xc3a67e80, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0188.039] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\Triedit\\en-US\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xc3a67e80, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xc3a67e80, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0188.042] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\VBA\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec355540, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc3a8dfe0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xc3a8dfe0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0188.045] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\VBA\\VBA6\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec355540, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc3a8dfe0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xc3a8dfe0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0188.087] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\VBA\\VBA6\\VBE6EXT.OLB" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vba\\vba6\\vbe6ext.olb"), lpNewFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\VBA\\VBA6\\VBE6EXT.OLB.masked" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vba\\vba6\\vbe6ext.olb.masked"), dwFlags=0x2) returned 1 [0188.097] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\VC\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f61b1a0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xc3b00400, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xc3b00400, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0188.100] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\VC\\amd64\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa3e46d20, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xc3b00400, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xc3b00400, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0188.103] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\VGX\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xc3b00400, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xc3b00400, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0188.107] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f4696f0, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0xc3b26560, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xc3b26560, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0188.111] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52622770, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc3b26560, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xc3b26560, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0188.115] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\x86\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5272d110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc3b26560, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xc3b26560, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0188.117] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\x86\\vsta_ep32.exe.config" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\8.0\\x86\\vsta_ep32.exe.config"), lpNewFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\x86\\vsta_ep32.exe.config.masked" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\8.0\\x86\\vsta_ep32.exe.config.masked"), dwFlags=0x2) returned 1 [0188.123] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\AppInfoDocument\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc3b4c6c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xc3b4c6c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0188.127] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\AppInfoDocument\\Microsoft.VisualStudio.Tools.Office.AppInfoDocument\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc3b4c6c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xc3b4c6c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0188.129] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20323f10, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0xc3b4c6c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xc3b4c6c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0188.132] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInSideAdapters\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5863dfb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc3b4c6c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xc3b4c6c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0188.136] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInViews\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69acfbd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc3b72820, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xc3b72820, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0188.139] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\Contracts\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52328bf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc3b72820, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xc3b72820, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0188.142] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\HostSideAdapters\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x583906f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc3b72820, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xc3b72820, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0188.146] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x274de510, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc3b72820, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xc3b72820, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0188.153] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x274de510, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc3b98980, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xc3b98980, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0188.157] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5279f530, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc3b98980, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xc3b98980, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0188.159] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOInstaller.config" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsto\\10.0\\vstoinstaller.config"), lpNewFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOInstaller.config.masked" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsto\\10.0\\vstoinstaller.config.masked"), dwFlags=0x2) returned 1 [0188.165] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21a6a110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc3b98980, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xc3b98980, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0188.168] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions\\14\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21a6a110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc3bbeae0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xc3bbeae0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0188.172] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions\\14\\BIN\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21a6a110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc3bbeae0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xc3bbeae0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0188.175] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\Services\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xc3bbeae0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xc3bbeae0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555ca0 [0188.179] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\SpeechEngines\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xc3bbeae0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xc3bbeae0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555ca0 [0188.183] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xc3be4c40, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xc3be4c40, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0188.183] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd8f7490, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd8f7490, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x180, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0188.185] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea1accb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x180, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0188.192] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd8f7490, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd8f7490, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x180, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0188.198] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\System\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xc3c0ada0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xc3c0ada0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555ca0 [0188.202] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\System\\ado\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xc3c0ada0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xc3c0ada0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0188.205] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\System\\ado\\en-US\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xc3c0ada0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xc3c0ada0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0188.210] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\System\\en-US\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xc3c0ada0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xc3c0ada0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0188.214] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\System\\msadc\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xc3c30f00, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xc3c30f00, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0188.218] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\System\\msadc\\en-US\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xc3c30f00, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xc3c30f00, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0188.222] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\System\\Ole DB\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xc3c30f00, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xc3c30f00, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0188.226] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\System\\Ole DB\\en-US\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea1accb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xc3c30f00, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xc3c30f00, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0188.230] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Google\\*", lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c82ea80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xc3c57060, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xc3c57060, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555c60 [0188.234] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7aa9d740, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xc3c57060, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xc3c57060, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555ca0 [0188.236] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xc3c57060, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xc3c57060, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0188.240] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xc3c57060, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xc3c57060, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0188.715] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\chrome_100_percent.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\chrome_100_percent.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\chrome_100_percent.pak.masked" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\chrome_100_percent.pak.masked"), dwFlags=0x2) returned 1 [0189.238] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\chrome_200_percent.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\chrome_200_percent.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\chrome_200_percent.pak.masked" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\chrome_200_percent.pak.masked"), dwFlags=0x2) returned 1 [0189.245] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xc46029c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xc46029c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0189.293] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Extensions\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xc4674de0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xc4674de0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0189.940] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\icudtl.dat" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\icudtl.dat"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\icudtl.dat.masked" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\icudtl.dat.masked"), dwFlags=0x2) returned 1 [0189.946] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Installer\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xc4cb47a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xc4cb47a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0190.466] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Installer\\chrome.7z" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\installer\\chrome.7z"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Installer\\chrome.7z.masked" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\installer\\chrome.7z.masked"), dwFlags=0x2) returned 1 [0190.472] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xc519d500, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xc519d500, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0191.133] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\am.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\am.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\am.pak.masked" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\am.pak.masked"), dwFlags=0x2) returned 1 [0191.724] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ar.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\ar.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ar.pak.masked" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\ar.pak.masked"), dwFlags=0x2) returned 1 [0192.244] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\bg.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\bg.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\bg.pak.masked" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\bg.pak.masked"), dwFlags=0x2) returned 1 [0192.777] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\bn.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\bn.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\bn.pak.masked" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\bn.pak.masked"), dwFlags=0x2) returned 1 [0193.124] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ca.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\ca.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ca.pak.masked" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\ca.pak.masked"), dwFlags=0x2) returned 1 [0193.471] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\cs.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\cs.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\cs.pak.masked" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\cs.pak.masked"), dwFlags=0x2) returned 1 [0193.853] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\da.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\da.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\da.pak.masked" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\da.pak.masked"), dwFlags=0x2) returned 1 [0194.180] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\de.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\de.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\de.pak.masked" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\de.pak.masked"), dwFlags=0x2) returned 1 [0194.785] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\el.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\el.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\el.pak.masked" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\el.pak.masked"), dwFlags=0x2) returned 1 [0195.125] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\en-GB.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\en-gb.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\en-GB.pak.masked" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\en-gb.pak.masked"), dwFlags=0x2) returned 1 [0195.450] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\en-US.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\en-us.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\en-US.pak.masked" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\en-us.pak.masked"), dwFlags=0x2) returned 1 [0195.880] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\es-419.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\es-419.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\es-419.pak.masked" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\es-419.pak.masked"), dwFlags=0x2) returned 1 [0196.235] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\es.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\es.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\es.pak.masked" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\es.pak.masked"), dwFlags=0x2) returned 1 [0196.546] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\et.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\et.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\et.pak.masked" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\et.pak.masked"), dwFlags=0x2) returned 1 [0197.240] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fa.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\fa.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fa.pak.masked" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\fa.pak.masked"), dwFlags=0x2) returned 1 [0197.601] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fi.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\fi.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fi.pak.masked" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\fi.pak.masked"), dwFlags=0x2) returned 1 [0198.062] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fil.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\fil.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fil.pak.masked" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\fil.pak.masked"), dwFlags=0x2) returned 1 [0198.499] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fr.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\fr.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fr.pak.masked" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\fr.pak.masked"), dwFlags=0x2) returned 1 [0199.083] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\gu.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\gu.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\gu.pak.masked" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\gu.pak.masked"), dwFlags=0x2) returned 1 [0199.613] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\he.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\he.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\he.pak.masked" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\he.pak.masked"), dwFlags=0x2) returned 1 [0200.211] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\hi.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\hi.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\hi.pak.masked" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\hi.pak.masked"), dwFlags=0x2) returned 1 [0200.535] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\hr.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\hr.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\hr.pak.masked" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\hr.pak.masked"), dwFlags=0x2) returned 1 [0200.886] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\hu.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\hu.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\hu.pak.masked" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\hu.pak.masked"), dwFlags=0x2) returned 1 [0201.194] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\id.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\id.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\id.pak.masked" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\id.pak.masked"), dwFlags=0x2) returned 1 [0201.536] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\it.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\it.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\it.pak.masked" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\it.pak.masked"), dwFlags=0x2) returned 1 [0201.966] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ja.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\ja.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ja.pak.masked" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\ja.pak.masked"), dwFlags=0x2) returned 1 [0202.483] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\kn.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\kn.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\kn.pak.masked" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\kn.pak.masked"), dwFlags=0x2) returned 1 [0202.830] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ko.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\ko.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ko.pak.masked" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\ko.pak.masked"), dwFlags=0x2) returned 1 [0203.178] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\lt.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\lt.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\lt.pak.masked" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\lt.pak.masked"), dwFlags=0x2) returned 1 [0203.532] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\lv.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\lv.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\lv.pak.masked" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\lv.pak.masked"), dwFlags=0x2) returned 1 [0204.075] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ml.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\ml.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ml.pak.masked" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\ml.pak.masked"), dwFlags=0x2) returned 1 [0204.602] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\mr.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\mr.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\mr.pak.masked" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\mr.pak.masked"), dwFlags=0x2) returned 1 [0204.865] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ms.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\ms.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ms.pak.masked" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\ms.pak.masked"), dwFlags=0x2) returned 1 [0205.218] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\nb.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\nb.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\nb.pak.masked" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\nb.pak.masked"), dwFlags=0x2) returned 1 [0205.548] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\nl.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\nl.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\nl.pak.masked" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\nl.pak.masked"), dwFlags=0x2) returned 1 [0205.942] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\pl.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\pl.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\pl.pak.masked" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\pl.pak.masked"), dwFlags=0x2) returned 1 [0206.305] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\pt-BR.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\pt-br.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\pt-BR.pak.masked" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\pt-br.pak.masked"), dwFlags=0x2) returned 1 [0206.651] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\pt-PT.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\pt-pt.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\pt-PT.pak.masked" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\pt-pt.pak.masked"), dwFlags=0x2) returned 1 [0206.999] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ro.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\ro.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ro.pak.masked" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\ro.pak.masked"), dwFlags=0x2) returned 1 [0207.517] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ru.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\ru.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ru.pak.masked" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\ru.pak.masked"), dwFlags=0x2) returned 1 [0207.928] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sk.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\sk.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sk.pak.masked" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\sk.pak.masked"), dwFlags=0x2) returned 1 [0208.329] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sl.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\sl.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sl.pak.masked" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\sl.pak.masked"), dwFlags=0x2) returned 1 [0208.841] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sr.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\sr.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sr.pak.masked" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\sr.pak.masked"), dwFlags=0x2) returned 1 [0209.163] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sv.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\sv.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sv.pak.masked" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\sv.pak.masked"), dwFlags=0x2) returned 1 [0209.538] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sw.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\sw.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sw.pak.masked" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\sw.pak.masked"), dwFlags=0x2) returned 1 [0210.081] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ta.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\ta.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ta.pak.masked" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\ta.pak.masked"), dwFlags=0x2) returned 1 [0210.591] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\te.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\te.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\te.pak.masked" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\te.pak.masked"), dwFlags=0x2) returned 1 [0211.099] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\th.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\th.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\th.pak.masked" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\th.pak.masked"), dwFlags=0x2) returned 1 [0211.442] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\tr.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\tr.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\tr.pak.masked" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\tr.pak.masked"), dwFlags=0x2) returned 1 [0212.002] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\uk.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\uk.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\uk.pak.masked" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\uk.pak.masked"), dwFlags=0x2) returned 1 [0212.424] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\vi.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\vi.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\vi.pak.masked" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\vi.pak.masked"), dwFlags=0x2) returned 1 [0212.712] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\zh-CN.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\zh-cn.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\zh-CN.pak.masked" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\zh-cn.pak.masked"), dwFlags=0x2) returned 1 [0212.987] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\zh-TW.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\zh-tw.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\zh-TW.pak.masked" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\zh-tw.pak.masked"), dwFlags=0x2) returned 1 [0213.262] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\natives_blob.bin" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\natives_blob.bin"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\natives_blob.bin.masked" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\natives_blob.bin.masked"), dwFlags=0x2) returned 1 [0213.856] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\resources.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\resources.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\resources.pak.masked" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\resources.pak.masked"), dwFlags=0x2) returned 1 [0214.427] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\snapshot_blob.bin" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\snapshot_blob.bin"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\snapshot_blob.bin.masked" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\snapshot_blob.bin.masked"), dwFlags=0x2) returned 1 [0214.434] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xd3588f80, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd3588f80, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0214.452] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logo.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\visualelements\\logo.png"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logo.png.masked" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\visualelements\\logo.png.masked"), dwFlags=0x2) returned 1 [0214.484] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logocanary.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\visualelements\\logocanary.png"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logocanary.png.masked" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\visualelements\\logocanary.png.masked"), dwFlags=0x2) returned 1 [0214.495] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogo.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\visualelements\\smalllogo.png"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogo.png.masked" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\visualelements\\smalllogo.png.masked"), dwFlags=0x2) returned 1 [0214.506] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogocanary.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\visualelements\\smalllogocanary.png"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogocanary.png.masked" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\visualelements\\smalllogocanary.png.masked"), dwFlags=0x2) returned 1 [0214.512] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xd3647660, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd3647660, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0214.517] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xd366d7c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd366d7c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0214.522] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x64\\*", lpFindFileData=0x38a2f4 | out: lpFindFileData=0x38a2f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xd366d7c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd366d7c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e20 [0214.524] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.VisualElementsManifest.xml" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\chrome.visualelementsmanifest.xml"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.VisualElementsManifest.xml.masked" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\chrome.visualelementsmanifest.xml.masked"), dwFlags=0x2) returned 1 [0214.530] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\SetupMetrics\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xd366d7c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd366d7c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0214.534] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Google\\CrashReports\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c82ea80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xd3693920, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd3693920, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555ca0 [0214.538] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Internet Explorer\\*", lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xd3693920, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd3693920, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555c60 [0214.541] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Internet Explorer\\en-US\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd3693920, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd3693920, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555ca0 [0214.546] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Internet Explorer\\SIGNUP\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd3693920, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd3693920, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555ca0 [0214.549] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Java\\*", lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x734f7d60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xd36b9a80, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd36b9a80, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555c60 [0214.553] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Java\\jre7\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x734f7d60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xd36b9a80, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd36b9a80, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555ca0 [0214.557] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Java\\jre7\\bin\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7438c420, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xd36b9a80, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd36b9a80, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0214.562] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Java\\jre7\\bin\\client\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xd36dfbe0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd36dfbe0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0214.566] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Java\\jre7\\bin\\client\\Xusage.txt" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\client\\xusage.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Java\\jre7\\bin\\client\\Xusage.txt.masked" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\client\\xusage.txt.masked"), dwFlags=0x2) returned 1 [0214.574] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Java\\jre7\\bin\\dtplugin\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xd36dfbe0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd36dfbe0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0214.581] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Java\\jre7\\bin\\plugin2\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xd3705d40, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd3705d40, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0214.585] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xd3705d40, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd3705d40, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0214.760] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\alt-rt.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\alt-rt.jar"), lpNewFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\alt-rt.jar.masked" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\alt-rt.jar.masked"), dwFlags=0x2) returned 1 [0214.767] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\applet\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xd38cedc0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd38cedc0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0215.448] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\charsets.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\charsets.jar"), lpNewFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\charsets.jar.masked" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\charsets.jar.masked"), dwFlags=0x2) returned 1 [0215.454] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\cmm\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xd3f5aa40, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd3f5aa40, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0215.535] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\currency.data" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\currency.data"), lpNewFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\currency.data.masked" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\currency.data.masked"), dwFlags=0x2) returned 1 [0215.542] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xd4019120, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd4019120, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0215.588] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\ffjcext.zip" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\ffjcext.zip"), lpNewFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\ffjcext.zip.masked" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\ffjcext.zip.masked"), dwFlags=0x2) returned 1 [0215.607] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\jqs\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xd40d7800, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd40d7800, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0215.658] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\splash.gif" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\splash.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\splash.gif.masked" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\splash.gif.masked"), dwFlags=0x2) returned 1 [0216.210] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\deploy.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy.jar"), lpNewFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\deploy.jar.masked" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy.jar.masked"), dwFlags=0x2) returned 1 [0216.219] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\ext\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xd46a4da0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd46a4da0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0216.307] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\ext\\access-bridge-32.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\ext\\access-bridge-32.jar"), lpNewFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\ext\\access-bridge-32.jar.masked" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\ext\\access-bridge-32.jar.masked"), dwFlags=0x2) returned 1 [0216.371] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\ext\\dnsns.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\ext\\dnsns.jar"), lpNewFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\ext\\dnsns.jar.masked" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\ext\\dnsns.jar.masked"), dwFlags=0x2) returned 1 [0216.418] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\ext\\jaccess.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\ext\\jaccess.jar"), lpNewFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\ext\\jaccess.jar.masked" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\ext\\jaccess.jar.masked"), dwFlags=0x2) returned 1 [0216.972] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\ext\\localedata.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\ext\\localedata.jar"), lpNewFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\ext\\localedata.jar.masked" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\ext\\localedata.jar.masked"), dwFlags=0x2) returned 1 [0216.992] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\ext\\sunec.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\ext\\sunec.jar"), lpNewFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\ext\\sunec.jar.masked" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\ext\\sunec.jar.masked"), dwFlags=0x2) returned 1 [0217.194] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\ext\\sunjce_provider.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\ext\\sunjce_provider.jar"), lpNewFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\ext\\sunjce_provider.jar.masked" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\ext\\sunjce_provider.jar.masked"), dwFlags=0x2) returned 1 [0217.228] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\ext\\sunmscapi.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\ext\\sunmscapi.jar"), lpNewFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\ext\\sunmscapi.jar.masked" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\ext\\sunmscapi.jar.masked"), dwFlags=0x2) returned 1 [0217.486] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\ext\\sunpkcs11.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\ext\\sunpkcs11.jar"), lpNewFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\ext\\sunpkcs11.jar.masked" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\ext\\sunpkcs11.jar.masked"), dwFlags=0x2) returned 1 [0217.556] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\ext\\zipfs.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\ext\\zipfs.jar"), lpNewFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\ext\\zipfs.jar.masked" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\ext\\zipfs.jar.masked"), dwFlags=0x2) returned 1 [0217.562] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\fonts\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xd53703e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd53703e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0217.565] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\i386\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xd53703e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd53703e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0217.568] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\i386\\jvm.cfg" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\i386\\jvm.cfg"), lpNewFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\i386\\jvm.cfg.masked" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\i386\\jvm.cfg.masked"), dwFlags=0x2) returned 1 [0217.575] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\images\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xd5396540, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd5396540, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0217.580] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xd5396540, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd5396540, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0217.582] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\invalid32x32.gif" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors\\invalid32x32.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\invalid32x32.gif.masked" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors\\invalid32x32.gif.masked"), dwFlags=0x2) returned 1 [0217.585] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_CopyDrop32x32.gif" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors\\win32_copydrop32x32.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_CopyDrop32x32.gif.masked" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors\\win32_copydrop32x32.gif.masked"), dwFlags=0x2) returned 1 [0217.588] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors\\win32_copynodrop32x32.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif.masked" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors\\win32_copynodrop32x32.gif.masked"), dwFlags=0x2) returned 1 [0217.591] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_LinkDrop32x32.gif" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors\\win32_linkdrop32x32.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_LinkDrop32x32.gif.masked" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors\\win32_linkdrop32x32.gif.masked"), dwFlags=0x2) returned 1 [0217.594] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors\\win32_linknodrop32x32.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif.masked" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors\\win32_linknodrop32x32.gif.masked"), dwFlags=0x2) returned 1 [0217.596] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_MoveDrop32x32.gif" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors\\win32_movedrop32x32.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_MoveDrop32x32.gif.masked" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors\\win32_movedrop32x32.gif.masked"), dwFlags=0x2) returned 1 [0217.599] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors\\win32_movenodrop32x32.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif.masked" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors\\win32_movenodrop32x32.gif.masked"), dwFlags=0x2) returned 1 [0218.102] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\javaws.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\javaws.jar"), lpNewFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\javaws.jar.masked" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\javaws.jar.masked"), dwFlags=0x2) returned 1 [0218.212] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\jce.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\jce.jar"), lpNewFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\jce.jar.masked" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\jce.jar.masked"), dwFlags=0x2) returned 1 [0218.218] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\jfr\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xd59afda0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd59afda0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0218.773] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\jfr.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\jfr.jar"), lpNewFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\jfr.jar.masked" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\jfr.jar.masked"), dwFlags=0x2) returned 1 [0219.301] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\jfxrt.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\jfxrt.jar"), lpNewFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\jfxrt.jar.masked" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\jfxrt.jar.masked"), dwFlags=0x2) returned 1 [0219.819] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\jsse.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\jsse.jar"), lpNewFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\jsse.jar.masked" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\jsse.jar.masked"), dwFlags=0x2) returned 1 [0219.833] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\jvm.hprof.txt" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\jvm.hprof.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\jvm.hprof.txt.masked" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\jvm.hprof.txt.masked"), dwFlags=0x2) returned 1 [0219.843] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\management\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x744bcf20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xd6928ca0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd6928ca0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0219.846] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\management-agent.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\management-agent.jar"), lpNewFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\management-agent.jar.masked" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\management-agent.jar.masked"), dwFlags=0x2) returned 1 [0220.391] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\plugin.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\plugin.jar"), lpNewFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\plugin.jar.masked" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\plugin.jar.masked"), dwFlags=0x2) returned 1 [0220.920] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\resources.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\resources.jar"), lpNewFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\resources.jar.masked" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\resources.jar.masked"), dwFlags=0x2) returned 1 [0221.434] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\rt.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\rt.jar"), lpNewFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\rt.jar.masked" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\rt.jar.masked"), dwFlags=0x2) returned 1 [0221.442] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\security\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xd787ba40, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd787ba40, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0221.479] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\security\\local_policy.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\security\\local_policy.jar"), lpNewFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\security\\local_policy.jar.masked" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\security\\local_policy.jar.masked"), dwFlags=0x2) returned 1 [0221.486] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\security\\US_export_policy.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\security\\us_export_policy.jar"), lpNewFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\security\\US_export_policy.jar.masked" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\security\\us_export_policy.jar.masked"), dwFlags=0x2) returned 1 [0221.500] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\zi\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xd78ede60, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd78ede60, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0221.504] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xd7913fc0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd7913fc0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0221.509] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xd7913fc0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd7913fc0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0221.514] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Argentina\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xd7913fc0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd7913fc0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0221.522] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Indiana\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xd793a120, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd793a120, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0221.525] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Kentucky\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xd793a120, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd793a120, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0221.541] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\North_Dakota\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xd7960280, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd7960280, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0221.545] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Antarctica\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x745a1760, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xd7960280, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd7960280, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0221.550] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x745c78c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xd7960280, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd7960280, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0221.560] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Atlantic\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74613b80, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xd79863e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd79863e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0221.564] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Australia\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74613b80, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xd79863e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd79863e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0221.569] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74639ce0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xd79ac540, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd79ac540, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0221.573] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7465fe40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xd79ac540, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd79ac540, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0221.578] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Indian\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xd79ac540, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd79ac540, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0221.581] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xd79ac540, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd79ac540, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0221.590] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\zi\\SystemV\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x746ac100, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xd79d26a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd79d26a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0221.592] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Java\\jre7\\README.txt" (normalized: "c:\\program files (x86)\\java\\jre7\\readme.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Java\\jre7\\README.txt.masked" (normalized: "c:\\program files (x86)\\java\\jre7\\readme.txt.masked"), dwFlags=0x2) returned 1 [0221.782] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Java\\jre7\\THIRDPARTYLICENSEREADME-JAVAFX.txt" (normalized: "c:\\program files (x86)\\java\\jre7\\thirdpartylicensereadme-javafx.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Java\\jre7\\THIRDPARTYLICENSEREADME-JAVAFX.txt.masked" (normalized: "c:\\program files (x86)\\java\\jre7\\thirdpartylicensereadme-javafx.txt.masked"), dwFlags=0x2) returned 1 [0221.999] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Java\\jre7\\THIRDPARTYLICENSEREADME.txt" (normalized: "c:\\program files (x86)\\java\\jre7\\thirdpartylicensereadme.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Java\\jre7\\THIRDPARTYLICENSEREADME.txt.masked" (normalized: "c:\\program files (x86)\\java\\jre7\\thirdpartylicensereadme.txt.masked"), dwFlags=0x2) returned 1 [0222.004] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Java\\jre7\\Welcome.html" (normalized: "c:\\program files (x86)\\java\\jre7\\welcome.html"), lpNewFileName="C:\\\\Program Files (x86)\\Java\\jre7\\Welcome.html.masked" (normalized: "c:\\program files (x86)\\java\\jre7\\welcome.html.masked"), dwFlags=0x2) returned 1 [0222.008] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Microsoft Analysis Services\\*", lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1ae930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd7dd6bc0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd7dd6bc0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555c60 [0222.012] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1ae930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd7dd6bc0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd7dd6bc0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555ca0 [0222.016] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1ae930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd7dd6bc0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd7dd6bc0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0222.023] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51494530, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd7dfcd20, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd7dfcd20, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0222.027] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1ae930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd7dfcd20, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd7dfcd20, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0222.030] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1ae930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd7dfcd20, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd7dfcd20, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0222.031] GetFileType (hFile=0x64) returned 0x1 [0222.033] GetFileType (hFile=0x64) returned 0x1 [0222.034] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Microsoft Office\\*", lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef0a44f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd7e22e80, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd7e22e80, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555c60 [0222.037] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Microsoft Office\\Office14\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef0a44f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd7e22e80, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd7e22e80, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555ca0 [0222.043] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Microsoft Office\\Office14\\1033\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef0a44f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd7e22e80, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd7e22e80, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0222.047] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\*", lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f11a30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd7e22e80, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd7e22e80, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555c60 [0222.050] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd7e48fe0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd7e48fe0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555ca0 [0222.054] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd7e48fe0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd7e48fe0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0222.057] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\PrivateAssemblies\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd7e48fe0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd7e48fe0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0222.061] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\PublicAssemblies\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52694b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd7e48fe0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd7e48fe0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0222.066] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd7e6f140, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd7e6f140, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0222.069] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd7e6f140, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd7e6f140, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0222.071] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd7e6f140, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd7e6f140, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0222.076] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\*", lpFindFileData=0x38a2f4 | out: lpFindFileData=0x38a2f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd7e6f140, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd7e6f140, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e20 [0222.145] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AboutBox.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\aboutbox.zip"), lpNewFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AboutBox.zip.masked" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\aboutbox.zip.masked"), dwFlags=0x2) returned 1 [0222.164] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfig.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\appconfig.zip"), lpNewFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfig.zip.masked" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\appconfig.zip.masked"), dwFlags=0x2) returned 1 [0222.181] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfigInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\appconfiginternal.zip"), lpNewFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfigInternal.zip.masked" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\appconfiginternal.zip.masked"), dwFlags=0x2) returned 1 [0222.203] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfo.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\assemblyinfo.zip"), lpNewFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfo.zip.masked" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\assemblyinfo.zip.masked"), dwFlags=0x2) returned 1 [0222.209] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfoInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\assemblyinfointernal.zip"), lpNewFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfoInternal.zip.masked" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\assemblyinfointernal.zip.masked"), dwFlags=0x2) returned 1 [0222.212] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Class.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\class.zip"), lpNewFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Class.zip.masked" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\class.zip.masked"), dwFlags=0x2) returned 1 [0222.216] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\CodeFile.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\codefile.zip"), lpNewFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\CodeFile.zip.masked" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\codefile.zip.masked"), dwFlags=0x2) returned 1 [0222.272] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\DataSet.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\dataset.zip"), lpNewFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\DataSet.zip.masked" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\dataset.zip.masked"), dwFlags=0x2) returned 1 [0222.304] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\EmptyDatabase.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\emptydatabase.zip"), lpNewFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\EmptyDatabase.zip.masked" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\emptydatabase.zip.masked"), dwFlags=0x2) returned 1 [0222.310] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Form.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\form.zip"), lpNewFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Form.zip.masked" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\form.zip.masked"), dwFlags=0x2) returned 1 [0222.349] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Interface.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\interface.zip"), lpNewFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Interface.zip.masked" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\interface.zip.masked"), dwFlags=0x2) returned 1 [0222.448] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\MDIParent.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\mdiparent.zip"), lpNewFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\MDIParent.zip.masked" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\mdiparent.zip.masked"), dwFlags=0x2) returned 1 [0222.463] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Resource.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\resource.zip"), lpNewFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Resource.zip.masked" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\resource.zip.masked"), dwFlags=0x2) returned 1 [0222.469] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\ResourceInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\resourceinternal.zip"), lpNewFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\ResourceInternal.zip.masked" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\resourceinternal.zip.masked"), dwFlags=0x2) returned 1 [0222.473] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Settings.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\settings.zip"), lpNewFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Settings.zip.masked" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\settings.zip.masked"), dwFlags=0x2) returned 1 [0222.478] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\SettingsInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\settingsinternal.zip"), lpNewFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\SettingsInternal.zip.masked" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\settingsinternal.zip.masked"), dwFlags=0x2) returned 1 [0222.484] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\TextFile.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\textfile.zip"), lpNewFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\TextFile.zip.masked" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\textfile.zip.masked"), dwFlags=0x2) returned 1 [0222.489] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\UserControl.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\usercontrol.zip"), lpNewFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\UserControl.zip.masked" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\usercontrol.zip.masked"), dwFlags=0x2) returned 1 [0222.493] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Visualizer.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\visualizer.zip"), lpNewFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Visualizer.zip.masked" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\visualizer.zip.masked"), dwFlags=0x2) returned 1 [0222.498] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\XmlFile.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\xmlfile.zip"), lpNewFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\XmlFile.zip.masked" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\xmlfile.zip.masked"), dwFlags=0x2) returned 1 [0222.504] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f5dcf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd82997c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd82997c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0222.507] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\*", lpFindFileData=0x38a2f4 | out: lpFindFileData=0x38a2f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f5dcf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd82997c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd82997c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e20 [0222.510] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AppConfigurationInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\appconfigurationinternal.zip"), lpNewFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AppConfigurationInternal.zip.masked" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\appconfigurationinternal.zip.masked"), dwFlags=0x2) returned 1 [0222.514] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AssemblyInfoInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\assemblyinfointernal.zip"), lpNewFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AssemblyInfoInternal.zip.masked" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\assemblyinfointernal.zip.masked"), dwFlags=0x2) returned 1 [0222.518] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Class.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\class.zip"), lpNewFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Class.zip.masked" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\class.zip.masked"), dwFlags=0x2) returned 1 [0222.522] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dataset.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\dataset.zip"), lpNewFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dataset.zip.masked" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\dataset.zip.masked"), dwFlags=0x2) returned 1 [0222.527] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dialog.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\dialog.zip"), lpNewFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dialog.zip.masked" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\dialog.zip.masked"), dwFlags=0x2) returned 1 [0222.531] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\EmptyDatabase.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\emptydatabase.zip"), lpNewFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\EmptyDatabase.zip.masked" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\emptydatabase.zip.masked"), dwFlags=0x2) returned 1 [0222.554] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Explorer.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\explorer.zip"), lpNewFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Explorer.zip.masked" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\explorer.zip.masked"), dwFlags=0x2) returned 1 [0222.559] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Form.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\form.zip"), lpNewFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Form.zip.masked" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\form.zip.masked"), dwFlags=0x2) returned 1 [0222.608] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\LoginForm.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\loginform.zip"), lpNewFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\LoginForm.zip.masked" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\loginform.zip.masked"), dwFlags=0x2) returned 1 [0222.627] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\MDIParent.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\mdiparent.zip"), lpNewFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\MDIParent.zip.masked" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\mdiparent.zip.masked"), dwFlags=0x2) returned 1 [0222.630] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Module.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\module.zip"), lpNewFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Module.zip.masked" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\module.zip.masked"), dwFlags=0x2) returned 1 [0222.635] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\ResourceInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\resourceinternal.zip"), lpNewFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\ResourceInternal.zip.masked" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\resourceinternal.zip.masked"), dwFlags=0x2) returned 1 [0222.639] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SettingsInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\settingsinternal.zip"), lpNewFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SettingsInternal.zip.masked" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\settingsinternal.zip.masked"), dwFlags=0x2) returned 1 [0222.718] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SplashScreen.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\splashscreen.zip"), lpNewFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SplashScreen.zip.masked" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\splashscreen.zip.masked"), dwFlags=0x2) returned 1 [0222.722] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Text.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\text.zip"), lpNewFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Text.zip.masked" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\text.zip.masked"), dwFlags=0x2) returned 1 [0222.727] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\UserControl.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\usercontrol.zip"), lpNewFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\UserControl.zip.masked" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\usercontrol.zip.masked"), dwFlags=0x2) returned 1 [0222.730] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\Packages\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd84aeb00, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd84aeb00, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0222.732] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\Packages\\Debugger\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd84aeb00, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd84aeb00, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0222.773] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\SDK\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f11a30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd8520f20, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd8520f20, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555ca0 [0222.775] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1120b5b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd8520f20, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd8520f20, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555ca0 [0222.788] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\Bin\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1120b5b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd8547080, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd8547080, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0222.797] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\Bin\\1033\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1120b5b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd8547080, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd8547080, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0222.802] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Microsoft.NET\\*", lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f1bbe30, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0xd856d1e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd856d1e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555c60 [0222.805] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd856d1e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd856d1e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555ca0 [0222.809] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Microsoft.NET\\RedistList\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a491400, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xd856d1e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd856d1e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555ca0 [0222.827] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_client.xml" (normalized: "c:\\program files (x86)\\microsoft.net\\redistlist\\assemblylist_4_client.xml"), lpNewFileName="C:\\\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_client.xml.masked" (normalized: "c:\\program files (x86)\\microsoft.net\\redistlist\\assemblylist_4_client.xml.masked"), dwFlags=0x2) returned 1 [0222.840] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_extended.xml" (normalized: "c:\\program files (x86)\\microsoft.net\\redistlist\\assemblylist_4_extended.xml"), lpNewFileName="C:\\\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_extended.xml.masked" (normalized: "c:\\program files (x86)\\microsoft.net\\redistlist\\assemblylist_4_extended.xml.masked"), dwFlags=0x2) returned 1 [0222.845] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Mozilla Firefox\\*", lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaeef6000, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xd85df600, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd85df600, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555c60 [0222.850] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Mozilla Firefox\\browser\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaef68420, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xd85df600, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd85df600, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555ca0 [0222.935] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Mozilla Firefox\\browser\\blocklist.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\blocklist.xml"), lpNewFileName="C:\\\\Program Files (x86)\\Mozilla Firefox\\browser\\blocklist.xml.masked" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\blocklist.xml.masked"), dwFlags=0x2) returned 1 [0222.941] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Mozilla Firefox\\browser\\components\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf261fa0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xd86c3e40, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd86c3e40, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0222.946] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf261fa0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xd86c3e40, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd86c3e40, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0222.950] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf2d43c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xd86c3e40, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd86c3e40, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0222.957] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\\icon.png" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\\icon.png"), lpNewFileName="C:\\\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\\icon.png.masked" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\\icon.png.masked"), dwFlags=0x2) returned 1 [0222.964] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf288100, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xd86e9fa0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd86e9fa0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0222.968] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\amazondotcom.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\amazondotcom.xml"), lpNewFileName="C:\\\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\amazondotcom.xml.masked" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\amazondotcom.xml.masked"), dwFlags=0x2) returned 1 [0222.974] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\bing.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\bing.xml"), lpNewFileName="C:\\\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\bing.xml.masked" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\bing.xml.masked"), dwFlags=0x2) returned 1 [0222.979] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\eBay.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\ebay.xml"), lpNewFileName="C:\\\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\eBay.xml.masked" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\ebay.xml.masked"), dwFlags=0x2) returned 1 [0222.985] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\google.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\google.xml"), lpNewFileName="C:\\\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\google.xml.masked" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\google.xml.masked"), dwFlags=0x2) returned 1 [0222.990] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\twitter.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\twitter.xml"), lpNewFileName="C:\\\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\twitter.xml.masked" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\twitter.xml.masked"), dwFlags=0x2) returned 1 [0222.997] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\wikipedia.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\wikipedia.xml"), lpNewFileName="C:\\\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\wikipedia.xml.masked" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\wikipedia.xml.masked"), dwFlags=0x2) returned 1 [0223.002] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\yahoo.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\yahoo.xml"), lpNewFileName="C:\\\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\yahoo.xml.masked" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\yahoo.xml.masked"), dwFlags=0x2) returned 1 [0223.008] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Mozilla Firefox\\defaults\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaefb46e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xd875c3c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd875c3c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555ca0 [0223.013] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Mozilla Firefox\\defaults\\pref\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf23be40, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xd875c3c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd875c3c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0223.016] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Mozilla Firefox\\defaults\\pref\\channel-prefs.js" (normalized: "c:\\program files (x86)\\mozilla firefox\\defaults\\pref\\channel-prefs.js"), lpNewFileName="C:\\\\Program Files (x86)\\Mozilla Firefox\\defaults\\pref\\channel-prefs.js.masked" (normalized: "c:\\program files (x86)\\mozilla firefox\\defaults\\pref\\channel-prefs.js.masked"), dwFlags=0x2) returned 1 [0223.022] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaefb46e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xd8782520, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd8782520, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555ca0 [0223.047] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Mozilla Firefox\\install.log" (normalized: "c:\\program files (x86)\\mozilla firefox\\install.log"), lpNewFileName="C:\\\\Program Files (x86)\\Mozilla Firefox\\install.log.masked" (normalized: "c:\\program files (x86)\\mozilla firefox\\install.log.masked"), dwFlags=0x2) returned 1 [0223.054] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Mozilla Firefox\\uninstall\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaef1c160, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xd87ce7e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd87ce7e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555ca0 [0223.075] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Mozilla Firefox\\uninstall\\uninstall.log" (normalized: "c:\\program files (x86)\\mozilla firefox\\uninstall\\uninstall.log"), lpNewFileName="C:\\\\Program Files (x86)\\Mozilla Firefox\\uninstall\\uninstall.log.masked" (normalized: "c:\\program files (x86)\\mozilla firefox\\uninstall\\uninstall.log.masked"), dwFlags=0x2) returned 1 [0223.082] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Mozilla Firefox\\webapprt\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf17d760, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xd881aaa0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd881aaa0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555ca0 [0223.086] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Mozilla Maintenance Service\\*", lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf770e60, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xd881aaa0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd881aaa0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555c60 [0223.088] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\MSBuild\\*", lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd881aaa0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd881aaa0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555c60 [0223.092] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\MSBuild\\Microsoft\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd881aaa0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd881aaa0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555ca0 [0223.096] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd8840c00, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd8840c00, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0223.100] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd8840c00, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd8840c00, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0223.103] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd8840c00, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd8840c00, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0223.107] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Reference Assemblies\\*", lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd8840c00, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd8840c00, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555c60 [0223.111] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Reference Assemblies\\Microsoft\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd8866d60, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd8866d60, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555ca0 [0223.115] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd8866d60, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd8866d60, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0223.119] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd8866d60, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd8866d60, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0223.123] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd8866d60, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd8866d60, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0223.131] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\FrameworkList.xml" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\redistlist\\frameworklist.xml"), lpNewFileName="C:\\\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\FrameworkList.xml.masked" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\redistlist\\frameworklist.xml.masked"), dwFlags=0x2) returned 1 [0223.137] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd888cec0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd888cec0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0223.142] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WinFXList.xml" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\winfxlist.xml"), lpNewFileName="C:\\\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WinFXList.xml.masked" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\winfxlist.xml.masked"), dwFlags=0x2) returned 1 [0223.147] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd88b3020, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd88b3020, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0223.152] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd88b3020, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd88b3020, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0223.155] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd88b3020, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd88b3020, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0223.158] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Uninstall Information\\*", lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x8907f814, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xd88d9180, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd88d9180, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555c60 [0223.160] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Defender\\*", lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd88d9180, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd88d9180, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555c60 [0223.164] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Defender\\en-US\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea1accb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd88d9180, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd88d9180, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555ca0 [0223.169] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Mail\\*", lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd91d5ea, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xd88d9180, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd88d9180, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555c60 [0223.172] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Mail\\en-US\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd88d9180, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd88d9180, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555ca0 [0223.175] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Media Player\\*", lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd88ff2e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd88ff2e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555c60 [0223.180] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Media Player\\en-US\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd88ff2e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd88ff2e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555ca0 [0223.180] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Media Player\\Icons\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x180, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555ca0 [0223.184] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Media Player\\Media Renderer\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd88ff2e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd88ff2e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555ca0 [0223.187] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Media Player\\Network Sharing\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd88ff2e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd88ff2e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555ca0 [0223.190] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Media Player\\Skins\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd8925440, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd8925440, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555ca0 [0223.193] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Media Player\\Visualizations\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd8925440, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd8925440, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555ca0 [0223.196] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows NT\\*", lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xd8925440, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd8925440, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555c60 [0223.201] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows NT\\Accessories\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd8925440, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd8925440, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555ca0 [0223.203] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows NT\\Accessories\\en-US\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea1accb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd8925440, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd8925440, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0223.207] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows NT\\TableTextService\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xd894b5a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd894b5a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555ca0 [0223.209] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows NT\\TableTextService\\en-US\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea1accb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd894b5a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd894b5a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0223.215] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Photo Viewer\\*", lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd894b5a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd894b5a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555c60 [0223.220] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Photo Viewer\\en-US\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd8971700, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd8971700, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555ca0 [0223.224] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Portable Devices\\*", lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd8971700, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd8971700, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555c60 [0223.228] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\*", lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd8971700, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd8971700, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555c60 [0223.232] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\en-US\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd8971700, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd8971700, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555ca0 [0223.236] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd8997860, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd8997860, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555ca0 [0223.240] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd8997860, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd8997860, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0223.244] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd8997860, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd8997860, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0223.247] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd8997860, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd8997860, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0223.250] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\js\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd8997860, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd8997860, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0223.254] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd89bd9c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd89bd9c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0223.259] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd89bd9c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd89bd9c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0223.263] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd89bd9c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd89bd9c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0223.267] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd89e3b20, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd89e3b20, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0223.271] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd89e3b20, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd89e3b20, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0223.277] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd89e3b20, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd89e3b20, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0223.286] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd8a09c80, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd8a09c80, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0223.289] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd8a09c80, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd8a09c80, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0223.292] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\css\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd8a09c80, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd8a09c80, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0223.294] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\js\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd8a09c80, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd8a09c80, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0223.299] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd8a2fde0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd8a2fde0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0223.303] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd8a2fde0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd8a2fde0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0223.307] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd8a2fde0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd8a2fde0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0223.309] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\css\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd8a2fde0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd8a2fde0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0223.313] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd8a55f40, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd8a55f40, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0223.318] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd8a55f40, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd8a55f40, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0223.322] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd8a55f40, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd8a55f40, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0223.326] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd8a55f40, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd8a55f40, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0223.330] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\css\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd8a7c0a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd8a7c0a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0223.335] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\js\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd8a7c0a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd8a7c0a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0223.339] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd8a7c0a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd8a7c0a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0223.346] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd8aa2200, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd8aa2200, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0223.350] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd8aa2200, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd8aa2200, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0223.354] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd8aa2200, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd8aa2200, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0223.358] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\js\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd8aa2200, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd8aa2200, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0223.362] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd8ac8360, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd8ac8360, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0223.367] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd8ac8360, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd8ac8360, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0223.372] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd8ac8360, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd8ac8360, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0223.377] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\css\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd8aee4c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd8aee4c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0223.380] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\js\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd8aee4c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd8aee4c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0223.387] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd8aee4c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd8aee4c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0223.391] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\in_sidebar\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd8aee4c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd8aee4c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0223.395] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\on_desktop\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd8b14620, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd8b14620, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0223.399] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd8b14620, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd8b14620, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0223.403] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd8b14620, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd8b14620, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0223.407] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd8b14620, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd8b14620, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0223.412] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd8b3a780, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd8b3a780, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0223.419] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd8b3a780, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd8b3a780, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0223.433] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd8b608e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd8b608e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0223.438] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd8b608e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd8b608e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0223.448] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Shared Gadgets\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd8b86a40, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd8b86a40, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555ca0 [0223.451] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\*", lpFindFileData=0x38e4b0 | out: lpFindFileData=0x38e4b0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xd8b86a40, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd8b86a40, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555ce0 [0223.462] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Adobe\\*", lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd8bacba0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd8bacba0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555c60 [0223.465] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Adobe\\Acrobat\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd8bacba0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd8bacba0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555ca0 [0223.469] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Adobe\\Acrobat\\10.0\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd8bacba0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd8bacba0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0223.475] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd8bd2d00, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd8bd2d00, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0223.479] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd8bd2d00, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd8bd2d00, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0223.483] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Adobe\\ARM\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd8bd2d00, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd8bd2d00, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0223.487] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd8bf8e60, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd8bf8e60, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555ca0 [0223.490] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Application Data\\*", lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe4efbbe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe4efbbe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x38d9d4, dwReserved1=0x77163c74, cFileName="ARM", cAlternateFileName="")) returned 0xffffffff [0223.495] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Desktop\\*", lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe4efbbe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe4efbbe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x38d9d4, dwReserved1=0x77163c74, cFileName="ARM", cAlternateFileName="")) returned 0xffffffff [0223.500] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Documents\\*", lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe4efbbe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe4efbbe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x38d9d4, dwReserved1=0x77163c74, cFileName="ARM", cAlternateFileName="")) returned 0xffffffff [0223.502] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Favorites\\*", lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe4efbbe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe4efbbe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x38d9d4, dwReserved1=0x77163c74, cFileName="ARM", cAlternateFileName="")) returned 0xffffffff [0223.505] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\*", lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xd8c1efc0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd8c1efc0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0223.509] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Assistance\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0xd8c1efc0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd8c1efc0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555c60 [0223.511] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Assistance\\Client\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0xd8c1efc0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd8c1efc0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555ca0 [0223.514] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0xd8c1efc0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd8c1efc0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0223.518] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x243448f1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd8c45120, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd8c45120, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0223.522] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Crypto\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xd8c45120, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd8c45120, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555c60 [0223.526] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Crypto\\DSS\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xd8c45120, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd8c45120, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555ca0 [0223.528] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xd8c45120, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd8c45120, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0223.531] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Crypto\\Keys\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xd8c45120, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd8c45120, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555ca0 [0223.535] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Crypto\\RSA\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xd8c6b280, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd8c6b280, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555ca0 [0223.538] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xd8c6b280, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd8c6b280, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0223.543] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfc65d150, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xd8c6b280, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd8c6b280, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0223.546] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Device Stage\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xd8c6b280, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd8c6b280, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555c60 [0223.550] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Device Stage\\Device\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xd8c913e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd8c913e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555ca0 [0223.554] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xd8c913e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd8c913e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0223.559] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xd8c913e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd8c913e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0223.563] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Device Stage\\Task\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xd8cb7540, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd8cb7540, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555ca0 [0223.568] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xd8cb7540, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd8cb7540, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0223.570] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd8cb7540, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd8cb7540, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0223.576] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xd8cb7540, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd8cb7540, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0223.578] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd8cdd6a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd8cdd6a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0223.582] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\DeviceSync\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xd8cdd6a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd8cdd6a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555c60 [0223.585] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\DRM\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xd8cdd6a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd8cdd6a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555c60 [0223.590] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\DRM\\Server\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xd8cdd6a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd8cdd6a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555ca0 [0223.592] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\eHome\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xd8cdd6a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd8cdd6a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555c60 [0223.595] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\eHome\\logs\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xd8d03800, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd8d03800, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555ca0 [0223.599] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Event Viewer\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0xd8d03800, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd8d03800, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555c60 [0223.606] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Event Viewer\\Views\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0xd8d03800, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd8d03800, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555ca0 [0223.608] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0xd8d03800, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd8d03800, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0223.612] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\IdentityCRL\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xd8d29960, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd8d29960, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555c60 [0223.614] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Media Player\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ee349fc, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0xd8d29960, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd8d29960, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555c60 [0223.618] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\MF\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd8d29960, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd8d29960, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555c60 [0223.621] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\MSDN\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd8d29960, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd8d29960, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555c60 [0223.624] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\MSDN\\8.0\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd8d29960, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd8d29960, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555ca0 [0223.629] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\NetFramework\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0xd8d4fac0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd8d4fac0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555c60 [0223.632] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0xd8d4fac0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd8d4fac0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555ca0 [0223.636] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Network\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xd8d4fac0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd8d4fac0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555c60 [0223.639] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Network\\Connections\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xd8d4fac0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd8d4fac0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555ca0 [0223.643] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Network\\Downloader\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xd8d75c20, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd8d75c20, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555ca0 [0224.161] MoveFileExW (lpExistingFileName="C:\\\\ProgramData\\Microsoft\\Network\\Downloader\\qmgr0.dat" (normalized: "c:\\programdata\\microsoft\\network\\downloader\\qmgr0.dat"), lpNewFileName="C:\\\\ProgramData\\Microsoft\\Network\\Downloader\\qmgr0.dat.masked" (normalized: "c:\\programdata\\microsoft\\network\\downloader\\qmgr0.dat.masked"), dwFlags=0x2) returned 1 [0224.918] MoveFileExW (lpExistingFileName="C:\\\\ProgramData\\Microsoft\\Network\\Downloader\\qmgr1.dat" (normalized: "c:\\programdata\\microsoft\\network\\downloader\\qmgr1.dat"), lpNewFileName="C:\\\\ProgramData\\Microsoft\\Network\\Downloader\\qmgr1.dat.masked" (normalized: "c:\\programdata\\microsoft\\network\\downloader\\qmgr1.dat.masked"), dwFlags=0x2) returned 1 [0224.924] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\OFFICE\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd99a8ce0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd99a8ce0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555c60 [0224.928] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd99a8ce0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd99a8ce0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555ca0 [0224.932] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd99a8ce0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd99a8ce0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0224.937] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd99cee40, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd99cee40, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0224.942] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd99cee40, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd99cee40, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555c60 [0224.944] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8ab1ae70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd99cee40, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xd99cee40, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555ca0 [0225.273] MoveFileExW (lpExistingFileName="C:\\\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\cache.dat" (normalized: "c:\\programdata\\microsoft\\officesoftwareprotectionplatform\\cache\\cache.dat"), lpNewFileName="C:\\\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\cache.dat.masked" (normalized: "c:\\programdata\\microsoft\\officesoftwareprotectionplatform\\cache\\cache.dat.masked"), dwFlags=0x2) returned 1 [0225.827] MoveFileExW (lpExistingFileName="C:\\\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\tokens.dat" (normalized: "c:\\programdata\\microsoft\\officesoftwareprotectionplatform\\tokens.dat"), lpNewFileName="C:\\\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\tokens.dat.masked" (normalized: "c:\\programdata\\microsoft\\officesoftwareprotectionplatform\\tokens.dat.masked"), dwFlags=0x2) returned 1 [0225.835] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\RAC\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xda249ca0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xda249ca0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555c60 [0225.837] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\RAC\\Outbound\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xda249ca0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xda249ca0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555ca0 [0225.841] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\RAC\\PublishedData\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xda26fe00, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xda26fe00, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555ca0 [0225.984] MoveFileExW (lpExistingFileName="C:\\\\ProgramData\\Microsoft\\RAC\\PublishedData\\RacWmiDatabase.sdf" (normalized: "c:\\programdata\\microsoft\\rac\\publisheddata\\racwmidatabase.sdf"), lpNewFileName="C:\\\\ProgramData\\Microsoft\\RAC\\PublishedData\\RacWmiDatabase.sdf.masked" (normalized: "c:\\programdata\\microsoft\\rac\\publisheddata\\racwmidatabase.sdf.masked"), dwFlags=0x2) returned 1 [0225.989] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\RAC\\StateData\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xda3c6a60, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xda3c6a60, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555ca0 [0226.505] MoveFileExW (lpExistingFileName="C:\\\\ProgramData\\Microsoft\\RAC\\StateData\\RacDatabase.sdf" (normalized: "c:\\programdata\\microsoft\\rac\\statedata\\racdatabase.sdf"), lpNewFileName="C:\\\\ProgramData\\Microsoft\\RAC\\StateData\\RacDatabase.sdf.masked" (normalized: "c:\\programdata\\microsoft\\rac\\statedata\\racdatabase.sdf.masked"), dwFlags=0x2) returned 1 [0226.509] MoveFileExW (lpExistingFileName="C:\\\\ProgramData\\Microsoft\\RAC\\StateData\\RacMetaData.dat" (normalized: "c:\\programdata\\microsoft\\rac\\statedata\\racmetadata.dat"), lpNewFileName="C:\\\\ProgramData\\Microsoft\\RAC\\StateData\\RacMetaData.dat.masked" (normalized: "c:\\programdata\\microsoft\\rac\\statedata\\racmetadata.dat.masked"), dwFlags=0x2) returned 1 [0226.528] MoveFileExW (lpExistingFileName="C:\\\\ProgramData\\Microsoft\\RAC\\StateData\\RacWmiDataBookmarks.dat" (normalized: "c:\\programdata\\microsoft\\rac\\statedata\\racwmidatabookmarks.dat"), lpNewFileName="C:\\\\ProgramData\\Microsoft\\RAC\\StateData\\RacWmiDataBookmarks.dat.masked" (normalized: "c:\\programdata\\microsoft\\rac\\statedata\\racwmidatabookmarks.dat.masked"), dwFlags=0x2) returned 1 [0226.546] MoveFileExW (lpExistingFileName="C:\\\\ProgramData\\Microsoft\\RAC\\StateData\\RacWmiEventData.dat" (normalized: "c:\\programdata\\microsoft\\rac\\statedata\\racwmieventdata.dat"), lpNewFileName="C:\\\\ProgramData\\Microsoft\\RAC\\StateData\\RacWmiEventData.dat.masked" (normalized: "c:\\programdata\\microsoft\\rac\\statedata\\racwmieventdata.dat.masked"), dwFlags=0x2) returned 1 [0226.549] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\RAC\\Temp\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xda921be0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xda921be0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555ca0 [0226.552] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Search\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27df8b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xda921be0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xda921be0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555c60 [0226.556] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Search\\Data\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27df8b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xda921be0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xda921be0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555ca0 [0226.560] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Search\\Data\\Applications\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e6af80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xda947d40, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xda947d40, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0226.563] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e6af80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xda947d40, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xda947d40, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0226.566] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Config\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e6af80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xda947d40, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xda947d40, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0226.570] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\GatherLogs\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e6af80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xda947d40, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xda947d40, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0226.574] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\GatherLogs\\SystemIndex\\*", lpFindFileData=0x38a2f4 | out: lpFindFileData=0x38a2f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x29932700, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xda96dea0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xda96dea0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e20 [0227.139] MoveFileExW (lpExistingFileName="C:\\\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\MSS.log" (normalized: "c:\\programdata\\microsoft\\search\\data\\applications\\windows\\mss.log"), lpNewFileName="C:\\\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\MSS.log.masked" (normalized: "c:\\programdata\\microsoft\\search\\data\\applications\\windows\\mss.log.masked"), dwFlags=0x2) returned 1 [0227.145] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e6af80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xdaec9020, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdaec9020, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0227.150] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\*", lpFindFileData=0x38a2f4 | out: lpFindFileData=0x38a2f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27eb7240, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xdaec9020, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdaec9020, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e20 [0227.153] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\*", lpFindFileData=0x389990 | out: lpFindFileData=0x389990*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x29958860, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xdaeef180, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdaeef180, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e60 [0227.158] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\*", lpFindFileData=0x38902c | out: lpFindFileData=0x38902c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x29958860, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xdaeef180, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdaeef180, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555ea0 [0227.161] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\PropMap\\*", lpFindFileData=0x389990 | out: lpFindFileData=0x389990*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27eb7240, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xdaeef180, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdaeef180, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e60 [0227.166] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\SecStore\\*", lpFindFileData=0x389990 | out: lpFindFileData=0x389990*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x29958860, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xdaeef180, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdaeef180, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e60 [0227.978] MoveFileExW (lpExistingFileName="C:\\\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Windows.edb" (normalized: "c:\\programdata\\microsoft\\search\\data\\applications\\windows\\windows.edb"), lpNewFileName="C:\\\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Windows.edb.masked" (normalized: "c:\\programdata\\microsoft\\search\\data\\applications\\windows\\windows.edb.masked"), dwFlags=0x2) returned 1 [0227.982] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Search\\Data\\Temp\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e1ecc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xdb6d1a60, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdb6d1a60, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0227.985] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\User Account Pictures\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xdb6d1a60, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdb6d1a60, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555c60 [0227.985] MoveFileExW (lpExistingFileName="C:\\\\ProgramData\\Microsoft\\User Account Pictures\\5p5NrGJn0jS HALPmcxz.dat" (normalized: "c:\\programdata\\microsoft\\user account pictures\\5p5nrgjn0js halpmcxz.dat"), lpNewFileName="C:\\\\ProgramData\\Microsoft\\User Account Pictures\\5p5NrGJn0jS HALPmcxz.dat.masked" (normalized: "c:\\programdata\\microsoft\\user account pictures\\5p5nrgjn0js halpmcxz.dat.masked"), dwFlags=0x2) returned 1 [0227.993] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xdb6d1a60, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdb6d1a60, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555ca0 [0228.049] MoveFileExW (lpExistingFileName="C:\\\\ProgramData\\Microsoft\\User Account Pictures\\guest.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\guest.bmp"), lpNewFileName="C:\\\\ProgramData\\Microsoft\\User Account Pictures\\guest.bmp.masked" (normalized: "c:\\programdata\\microsoft\\user account pictures\\guest.bmp.masked"), dwFlags=0x2) returned 1 [0228.097] MoveFileExW (lpExistingFileName="C:\\\\ProgramData\\Microsoft\\User Account Pictures\\user.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\user.bmp"), lpNewFileName="C:\\\\ProgramData\\Microsoft\\User Account Pictures\\user.bmp.masked" (normalized: "c:\\programdata\\microsoft\\user account pictures\\user.bmp.masked"), dwFlags=0x2) returned 1 [0228.102] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Vault\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xdb7dc400, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdb7dc400, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555c60 [0228.106] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\VISIO\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80ac5760, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xdb802560, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdb802560, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555c60 [0228.108] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xdb802560, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdb802560, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555c60 [0228.111] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows\\AIT\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xdb802560, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdb802560, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555ca0 [0228.113] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Caches\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x283ea490, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xdb802560, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdb802560, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555ca0 [0228.130] MoveFileExW (lpExistingFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db"), lpNewFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db.masked" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db.masked"), dwFlags=0x2) returned 1 [0228.136] MoveFileExW (lpExistingFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Caches\\{11336D5B-7F61-4871-82E3-E0F59766823B}.2.ver0x0000000000000001.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{11336d5b-7f61-4871-82e3-e0f59766823b}.2.ver0x0000000000000001.db"), lpNewFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Caches\\{11336D5B-7F61-4871-82E3-E0F59766823B}.2.ver0x0000000000000001.db.masked" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{11336d5b-7f61-4871-82e3-e0f59766823b}.2.ver0x0000000000000001.db.masked"), dwFlags=0x2) returned 1 [0228.139] MoveFileExW (lpExistingFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Caches\\{3978EA0A-1C7E-4449-8AE1-E1265F039002}.2.ver0x0000000000000003.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{3978ea0a-1c7e-4449-8ae1-e1265f039002}.2.ver0x0000000000000003.db"), lpNewFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Caches\\{3978EA0A-1C7E-4449-8AE1-E1265F039002}.2.ver0x0000000000000003.db.masked" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{3978ea0a-1c7e-4449-8ae1-e1265f039002}.2.ver0x0000000000000003.db.masked"), dwFlags=0x2) returned 1 [0228.144] MoveFileExW (lpExistingFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Caches\\{40FC8D7D-05ED-4FEB-B03B-6C100659EF5C}.2.ver0x0000000000000001.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{40fc8d7d-05ed-4feb-b03b-6c100659ef5c}.2.ver0x0000000000000001.db"), lpNewFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Caches\\{40FC8D7D-05ED-4FEB-B03B-6C100659EF5C}.2.ver0x0000000000000001.db.masked" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{40fc8d7d-05ed-4feb-b03b-6c100659ef5c}.2.ver0x0000000000000001.db.masked"), dwFlags=0x2) returned 1 [0228.147] MoveFileExW (lpExistingFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Caches\\{4E36EA69-73D1-4458-9D16-50F8E31A69A0}.2.ver0x0000000000000001.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{4e36ea69-73d1-4458-9d16-50f8e31a69a0}.2.ver0x0000000000000001.db"), lpNewFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Caches\\{4E36EA69-73D1-4458-9D16-50F8E31A69A0}.2.ver0x0000000000000001.db.masked" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{4e36ea69-73d1-4458-9d16-50f8e31a69a0}.2.ver0x0000000000000001.db.masked"), dwFlags=0x2) returned 1 [0228.152] MoveFileExW (lpExistingFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Caches\\{4E4260A4-7E39-442E-BC22-7FF751D1C161}.2.ver0x0000000000000002.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{4e4260a4-7e39-442e-bc22-7ff751d1c161}.2.ver0x0000000000000002.db"), lpNewFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Caches\\{4E4260A4-7E39-442E-BC22-7FF751D1C161}.2.ver0x0000000000000002.db.masked" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{4e4260a4-7e39-442e-bc22-7ff751d1c161}.2.ver0x0000000000000002.db.masked"), dwFlags=0x2) returned 1 [0228.408] MoveFileExW (lpExistingFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Caches\\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000011.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x0000000000000011.db"), lpNewFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Caches\\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000011.db.masked" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x0000000000000011.db.masked"), dwFlags=0x2) returned 1 [0228.609] MoveFileExW (lpExistingFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Caches\\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000012.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x0000000000000012.db"), lpNewFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Caches\\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000012.db.masked" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x0000000000000012.db.masked"), dwFlags=0x2) returned 1 [0229.035] MoveFileExW (lpExistingFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Caches\\{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000002.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000002.db"), lpNewFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Caches\\{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000002.db.masked" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000002.db.masked"), dwFlags=0x2) returned 1 [0229.042] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xdc0ef7e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdc0ef7e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555ca0 [0229.046] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xdc0ef7e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdc0ef7e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0229.050] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows\\DRM\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xdc0ef7e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdc0ef7e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555ca0 [0229.053] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows\\DRM\\Cache\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xdc0ef7e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdc0ef7e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0229.056] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows\\GameExplorer\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xdc115940, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdc115940, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555ca0 [0229.062] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Power Efficiency Diagnostics\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xdc115940, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdc115940, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555ca0 [0229.095] MoveFileExW (lpExistingFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report-2017-07-12.xml" (normalized: "c:\\programdata\\microsoft\\windows\\power efficiency diagnostics\\energy-report-2017-07-12.xml"), lpNewFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report-2017-07-12.xml.masked" (normalized: "c:\\programdata\\microsoft\\windows\\power efficiency diagnostics\\energy-report-2017-07-12.xml.masked"), dwFlags=0x2) returned 1 [0229.125] MoveFileExW (lpExistingFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report-2017-07-26.xml" (normalized: "c:\\programdata\\microsoft\\windows\\power efficiency diagnostics\\energy-report-2017-07-26.xml"), lpNewFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report-2017-07-26.xml.masked" (normalized: "c:\\programdata\\microsoft\\windows\\power efficiency diagnostics\\energy-report-2017-07-26.xml.masked"), dwFlags=0x2) returned 1 [0229.150] MoveFileExW (lpExistingFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report-latest.xml" (normalized: "c:\\programdata\\microsoft\\windows\\power efficiency diagnostics\\energy-report-latest.xml"), lpNewFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report-latest.xml.masked" (normalized: "c:\\programdata\\microsoft\\windows\\power efficiency diagnostics\\energy-report-latest.xml.masked"), dwFlags=0x2) returned 1 [0229.202] MoveFileExW (lpExistingFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report.html" (normalized: "c:\\programdata\\microsoft\\windows\\power efficiency diagnostics\\energy-report.html"), lpNewFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report.html.masked" (normalized: "c:\\programdata\\microsoft\\windows\\power efficiency diagnostics\\energy-report.html.masked"), dwFlags=0x2) returned 1 [0229.208] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Ringtones\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xdc26c5a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdc26c5a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555ca0 [0229.411] MoveFileExW (lpExistingFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 01.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 01.wma"), lpNewFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 01.wma.masked" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 01.wma.masked"), dwFlags=0x2) returned 1 [0229.614] MoveFileExW (lpExistingFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 02.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 02.wma"), lpNewFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 02.wma.masked" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 02.wma.masked"), dwFlags=0x2) returned 1 [0229.807] MoveFileExW (lpExistingFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 03.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 03.wma"), lpNewFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 03.wma.masked" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 03.wma.masked"), dwFlags=0x2) returned 1 [0230.170] MoveFileExW (lpExistingFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 04.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 04.wma"), lpNewFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 04.wma.masked" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 04.wma.masked"), dwFlags=0x2) returned 1 [0230.284] MoveFileExW (lpExistingFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 05.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 05.wma"), lpNewFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 05.wma.masked" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 05.wma.masked"), dwFlags=0x2) returned 1 [0230.378] MoveFileExW (lpExistingFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 06.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 06.wma"), lpNewFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 06.wma.masked" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 06.wma.masked"), dwFlags=0x2) returned 1 [0230.476] MoveFileExW (lpExistingFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 07.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 07.wma"), lpNewFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 07.wma.masked" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 07.wma.masked"), dwFlags=0x2) returned 1 [0230.618] MoveFileExW (lpExistingFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 08.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 08.wma"), lpNewFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 08.wma.masked" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 08.wma.masked"), dwFlags=0x2) returned 1 [0230.809] MoveFileExW (lpExistingFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 09.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 09.wma"), lpNewFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 09.wma.masked" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 09.wma.masked"), dwFlags=0x2) returned 1 [0230.913] MoveFileExW (lpExistingFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 10.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 10.wma"), lpNewFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 10.wma.masked" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 10.wma.masked"), dwFlags=0x2) returned 1 [0230.919] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Sqm\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60ae73a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0xdd2c9ce0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdd2c9ce0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555ca0 [0230.921] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Sqm\\Manifest\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60ae73a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0xdd2c9ce0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdd2c9ce0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0230.935] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Sqm\\Sessions\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60ae73a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0xdd2efe40, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdd2efe40, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0230.938] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Sqm\\Upload\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60ae73a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0xdd2efe40, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdd2efe40, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0230.942] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Start Menu\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xdd2efe40, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdd2efe40, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555ca0 [0230.946] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xdd315fa0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdd315fa0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0230.950] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xdd315fa0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdd315fa0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0230.954] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xdd315fa0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdd315fa0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0230.957] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xdd315fa0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdd315fa0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0230.959] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xdd33c100, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdd33c100, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0230.962] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xdd33c100, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdd33c100, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0230.965] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xdd33c100, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdd33c100, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0230.969] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xdd33c100, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdd33c100, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0230.972] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7577bc60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xdd33c100, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdd33c100, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0230.975] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xdd362260, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdd362260, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0230.977] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77f53bd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xdd362260, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdd362260, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0230.981] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77f53bd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xdd362260, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdd362260, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0230.984] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x78038410, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xdd362260, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdd362260, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0230.987] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xdd362260, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdd362260, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0230.993] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Tablet PC\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xdd3883c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdd3883c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0230.997] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Templates\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xdd3883c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdd3883c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555ca0 [0231.004] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows\\WER\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xdd3883c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdd3883c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555ca0 [0231.006] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows\\WER\\ReportArchive\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xdd3ae520, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdd3ae520, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0231.009] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows\\WER\\ReportQueue\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xdd3ae520, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdd3ae520, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0231.012] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows Defender\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xdd3ae520, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdd3ae520, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555c60 [0231.015] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows Defender\\Definition Updates\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xdd3ae520, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdd3ae520, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555ca0 [0231.017] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows Defender\\Definition Updates\\Backup\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xdd3ae520, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdd3ae520, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0231.020] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows Defender\\Definition Updates\\Updates\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xdd3d4680, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdd3d4680, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0231.023] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows Defender\\Definition Updates\\{D2B0B133-42ED-44D3-809A-46EBB62BA863}\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1fb3099, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0xdd3d4680, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdd3d4680, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0231.025] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows Defender\\LocalCopy\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xdd3d4680, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdd3d4680, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555ca0 [0231.028] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows Defender\\Quarantine\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xdd3d4680, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdd3d4680, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555ca0 [0231.030] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows Defender\\Scans\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xdd3d4680, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdd3d4680, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555ca0 [0231.035] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7690f9e4, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0xdd3d4680, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdd3d4680, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0231.040] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\CacheManager\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x76b24d28, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0xdd3fa7e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdd3fa7e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0231.254] MoveFileExW (lpExistingFileName="C:\\\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\CacheManager\\MpSfc.bin" (normalized: "c:\\programdata\\microsoft\\windows defender\\scans\\history\\cachemanager\\mpsfc.bin"), lpNewFileName="C:\\\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\CacheManager\\MpSfc.bin.masked" (normalized: "c:\\programdata\\microsoft\\windows defender\\scans\\history\\cachemanager\\mpsfc.bin.masked"), dwFlags=0x2) returned 1 [0231.258] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Results\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x244fb42, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0xdd60fb20, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdd60fb20, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0231.264] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Results\\Resource\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa13d69d0, ftCreationTime.dwHighDateTime=0x1d2dda3, ftLastAccessTime.dwLowDateTime=0xdd60fb20, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdd60fb20, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0231.268] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Service\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x769ce0c6, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0xdd60fb20, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdd60fb20, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0231.270] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Store\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x244fb42, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0xdd635c80, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdd635c80, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0231.274] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows Defender\\Support\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xdd635c80, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdd635c80, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555ca0 [0231.278] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows NT\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xdd635c80, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdd635c80, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555c60 [0231.283] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows NT\\MSFax\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xdd635c80, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdd635c80, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555ca0 [0231.285] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows NT\\MSFax\\ActivityLog\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xdd65bde0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdd65bde0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0231.291] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xdd65bde0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdd65bde0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0231.295] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xdd65bde0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdd65bde0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0231.298] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Inbox\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xdd65bde0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdd65bde0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0231.300] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Queue\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xdd65bde0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdd65bde0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0231.302] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows NT\\MSFax\\SentItems\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xdd681f40, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdd681f40, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0231.306] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xdd681f40, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdd681f40, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0231.309] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\en-US\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xdd681f40, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdd681f40, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0231.311] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows NT\\MSScan\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xdd681f40, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdd681f40, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555ca0 [0231.314] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\WwanSvc\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xdd681f40, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdd681f40, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555c60 [0231.314] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\WwanSvc\\Profiles\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x180, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555ca0 [0231.319] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft Help\\*", lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe79db030, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xdd6a80a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdd6a80a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0231.323] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Mozilla\\*", lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xdd6a80a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdd6a80a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555c60 [0231.327] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Mozilla\\logs\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xdd6a80a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdd6a80a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0231.329] MoveFileExW (lpExistingFileName="C:\\\\ProgramData\\Mozilla\\logs\\maintenanceservice-install.log" (normalized: "c:\\programdata\\mozilla\\logs\\maintenanceservice-install.log"), lpNewFileName="C:\\\\ProgramData\\Mozilla\\logs\\maintenanceservice-install.log.masked" (normalized: "c:\\programdata\\mozilla\\logs\\maintenanceservice-install.log.masked"), dwFlags=0x2) returned 1 [0231.335] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Oracle\\*", lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7e3c6d00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xdd6ce200, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdd6ce200, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0231.341] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\*", lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xecce51e0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xdd6ce200, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdd6ce200, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0231.346] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2924cac0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xdd6ce200, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdd6ce200, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555c60 [0231.350] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xdd6f4360, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdd6f4360, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555ca0 [0231.353] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xdd6f4360, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdd6f4360, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0231.358] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xdd6f4360, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdd6f4360, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0231.363] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa938e870, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xdd71a4c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdd71a4c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555c60 [0231.367] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xdd71a4c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdd71a4c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555ca0 [0231.372] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xdd71a4c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdd71a4c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0231.378] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xdd71a4c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdd71a4c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0231.383] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb49460, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xdd740620, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdd740620, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555c60 [0231.390] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xdd740620, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdd740620, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555ca0 [0231.397] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xdd766780, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdd766780, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0231.402] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd0b340, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xdd766780, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdd766780, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555c60 [0231.407] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xdd766780, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdd766780, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555c60 [0231.412] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xdd78c8e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdd78c8e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555ca0 [0231.416] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xdd78c8e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdd78c8e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0231.422] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a0db1a0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xdd78c8e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdd78c8e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555c60 [0231.427] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xdd7b2a40, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdd7b2a40, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555c60 [0231.432] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xdd7b2a40, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdd7b2a40, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555ca0 [0231.436] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xdd7b2a40, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdd7b2a40, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0231.441] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xdd7d8ba0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdd7d8ba0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555c60 [0231.446] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xdd7d8ba0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdd7d8ba0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555ca0 [0231.454] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xdd7d8ba0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdd7d8ba0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0231.466] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xdd7fed00, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdd7fed00, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555c60 [0231.471] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xdd7fed00, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdd7fed00, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555ca0 [0231.476] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xdd824e60, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdd824e60, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0231.490] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xdd84afc0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdd84afc0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555c60 [0231.494] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a20bca0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xdd84afc0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdd84afc0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555ca0 [0231.499] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a20bca0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xdd84afc0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdd84afc0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0231.504] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a199880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xdd871120, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdd871120, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555c60 [0231.509] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xdd871120, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdd871120, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555ca0 [0231.513] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xdd871120, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdd871120, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0231.520] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xdd897280, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdd897280, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555c60 [0231.525] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xdd897280, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdd897280, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555ca0 [0231.532] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xdd897280, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdd897280, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0231.536] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd7d760, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xdd8bd3e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdd8bd3e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555c60 [0231.540] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xdd8bd3e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdd8bd3e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555ca0 [0231.544] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xdd8bd3e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdd8bd3e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0231.549] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfaaff840, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xdd8bd3e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdd8bd3e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555c60 [0231.555] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfab71c60, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xdd8e3540, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdd8e3540, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555c60 [0231.559] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabbdf20, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xdd8e3540, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdd8e3540, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555ca0 [0231.564] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabbdf20, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xdd8e3540, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdd8e3540, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0231.569] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa93425b0, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xdd9096a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdd9096a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555c60 [0231.573] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9368710, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xdd9096a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdd9096a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555ca0 [0231.577] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9368710, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xdd9096a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdd9096a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0231.583] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa912d270, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xdd92f800, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdd92f800, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555c60 [0231.587] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca64c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xdd92f800, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdd92f800, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555c60 [0231.591] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf93c9960, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xdd92f800, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdd92f800, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555c60 [0231.595] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xdd92f800, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdd92f800, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555c60 [0231.600] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xdd955960, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdd955960, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555ca0 [0231.605] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xdd955960, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdd955960, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0231.609] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Start Menu\\*", lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcbbb880, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcbbb880, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x38d9d4, dwReserved1=0x77163c74, cFileName="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", cAlternateFileName="{F8CFE~1.210")) returned 0xffffffff [0231.613] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Sun\\*", lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xdd97bac0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdd97bac0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0231.620] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Sun\\Java\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xdd97bac0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdd97bac0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555ca0 [0231.625] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Sun\\Java\\Java Update\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xdd97bac0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdd97bac0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555c60 [0231.626] MoveFileExW (lpExistingFileName="C:\\\\ProgramData\\Sun\\Java\\Java Update\\jaureglist.xml" (normalized: "c:\\programdata\\sun\\java\\java update\\jaureglist.xml"), lpNewFileName="C:\\\\ProgramData\\Sun\\Java\\Java Update\\jaureglist.xml.masked" (normalized: "c:\\programdata\\sun\\java\\java update\\jaureglist.xml.masked"), dwFlags=0x2) returned 1 [0231.631] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Templates\\*", lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x38d9d4, dwReserved1=0x77163c74, cFileName="Java", cAlternateFileName="")) returned 0xffffffff [0231.638] FindFirstFileA (in: lpFileName="C:\\\\Recovery\\*", lpFindFileData=0x38e4b0 | out: lpFindFileData=0x38e4b0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27c09980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xdd9a1c20, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdd9a1c20, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555ce0 [0231.648] FindFirstFileA (in: lpFileName="C:\\\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\*", lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27c09980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xdd9c7d80, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdd9c7d80, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0231.648] FindFirstFileA (in: lpFileName="C:\\\\System Volume Information\\*", lpFindFileData=0x38e4b0 | out: lpFindFileData=0x38e4b0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27c09980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27c2fae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27c2fae0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x38e338, dwReserved1=0x77163c74, cFileName="e9e23962-4a25-11e7-88e8-91fb2ec43f0b", cAlternateFileName="E9E239~1")) returned 0xffffffff [0231.650] FindFirstFileA (in: lpFileName="C:\\\\Users\\*", lpFindFileData=0x38e4b0 | out: lpFindFileData=0x38e4b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x64ad6240, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0x64ad6240, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555ce0 [0231.654] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\*", lpFindFileData=0x38db4c | out: lpFindFileData=0x38db4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xdd9c7d80, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdd9c7d80, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d20 [0231.659] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\*", lpFindFileData=0x38d1e8 | out: lpFindFileData=0x38d1e8*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xdd9c7d80, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdd9c7d80, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555ca0 [0231.663] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\*", lpFindFileData=0x38c884 | out: lpFindFileData=0x38c884*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xdd9edee0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdd9edee0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x555c60 [0231.667] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xdd9edee0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdd9edee0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0231.669] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xdd9edee0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdd9edee0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0231.673] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xdd9edee0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdd9edee0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0231.678] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\*", lpFindFileData=0x38a2f4 | out: lpFindFileData=0x38a2f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xecb5bdd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xdda14040, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdda14040, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e20 [0231.753] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\UserCache.bin" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0\\usercache.bin"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\UserCache.bin.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0\\usercache.bin.masked"), dwFlags=0x2) returned 1 [0231.759] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xddad2720, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xddad2720, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0231.764] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\Profiles\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xce4463a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xddad2720, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xddad2720, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0231.767] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Application Data\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce60f420, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce60f420, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x38bda8, dwReserved1=0x77163c74, cFileName="Color", cAlternateFileName="")) returned 0xffffffff [0231.771] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xddaf8880, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xddaf8880, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0231.777] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xddaf8880, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xddaf8880, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0231.780] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65fb9720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xddaf8880, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xddaf8880, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0231.783] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\*", lpFindFileData=0x38a2f4 | out: lpFindFileData=0x38a2f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65fb9720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xddaf8880, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xddaf8880, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e20 [0231.787] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\*", lpFindFileData=0x389990 | out: lpFindFileData=0x389990*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65fb9720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xddb1e9e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xddb1e9e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e60 [0231.792] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\*", lpFindFileData=0x38902c | out: lpFindFileData=0x38902c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a3a0420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xddb1e9e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xddb1e9e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555ea0 [0231.795] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\Data\\*", lpFindFileData=0x3886c8 | out: lpFindFileData=0x3886c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a3a0420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xddb1e9e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xddb1e9e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555ee0 [0231.798] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xddb1e9e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xddb1e9e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0231.803] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\*", lpFindFileData=0x38a2f4 | out: lpFindFileData=0x38a2f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xddb44b40, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xddb44b40, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e20 [0231.809] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715\\*", lpFindFileData=0x389990 | out: lpFindFileData=0x389990*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xddb44b40, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xddb44b40, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e60 [0231.814] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\*", lpFindFileData=0x389990 | out: lpFindFileData=0x389990*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xddb44b40, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xddb44b40, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e60 [0231.819] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\*", lpFindFileData=0x389990 | out: lpFindFileData=0x389990*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xddb6aca0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xddb6aca0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e60 [0231.821] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Deployment\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65e16800, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xddb6aca0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xddb6aca0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0231.925] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\GDIPFONTCACHEV1.DAT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\gdipfontcachev1.dat"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\GDIPFONTCACHEV1.DAT.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\gdipfontcachev1.dat.masked"), dwFlags=0x2) returned 1 [0231.933] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b0b7d20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xddc75640, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xddc75640, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0231.937] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f572ae0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xddc75640, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xddc75640, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0231.984] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f572ae0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xddce7a60, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xddce7a60, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0231.994] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency\\*", lpFindFileData=0x38a2f4 | out: lpFindFileData=0x38a2f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xddd0dbc0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xddd0dbc0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e20 [0231.999] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\*", lpFindFileData=0x38a2f4 | out: lpFindFileData=0x38a2f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f598c40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xddd0dbc0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xddd0dbc0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e20 [0232.001] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\*", lpFindFileData=0x389990 | out: lpFindFileData=0x389990*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f598c40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xddd0dbc0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xddd0dbc0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e60 [0232.003] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\settings.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\crashpad\\settings.dat"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\settings.dat.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\crashpad\\settings.dat.masked"), dwFlags=0x2) returned 1 [0232.008] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\*", lpFindFileData=0x38a2f4 | out: lpFindFileData=0x38a2f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f846500, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xddd33d20, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xddd33d20, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e20 [0232.013] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\*", lpFindFileData=0x389990 | out: lpFindFileData=0x389990*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x805aa0c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xddd33d20, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xddd33d20, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e60 [0232.016] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\*", lpFindFileData=0x389990 | out: lpFindFileData=0x389990*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x802d66a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xddd33d20, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xddd33d20, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e60 [0232.018] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\000003.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\000003.log"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\000003.log.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\000003.log.masked"), dwFlags=0x2) returned 1 [0232.023] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\*", lpFindFileData=0x389990 | out: lpFindFileData=0x389990*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82ad9940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xddd59e80, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xddd59e80, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e60 [0232.025] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\000003.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\000003.log"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\000003.log.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\000003.log.masked"), dwFlags=0x2) returned 1 [0232.031] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\*", lpFindFileData=0x389990 | out: lpFindFileData=0x389990*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x824ad030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xddd59e80, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xddd59e80, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e60 [0232.037] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\000003.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\000003.log"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\000003.log.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\000003.log.masked"), dwFlags=0x2) returned 1 [0232.042] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\*", lpFindFileData=0x389990 | out: lpFindFileData=0x389990*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80d1a580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xddd7ffe0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xddd7ffe0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e60 [0232.058] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\*", lpFindFileData=0x38902c | out: lpFindFileData=0x38902c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85cca3f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xddda6140, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xddda6140, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555ea0 [0232.063] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\*", lpFindFileData=0x3886c8 | out: lpFindFileData=0x3886c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xddda6140, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xddda6140, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555ee0 [0232.069] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png.masked"), dwFlags=0x2) returned 1 [0232.072] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png.masked"), dwFlags=0x2) returned 1 [0232.074] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html.masked"), dwFlags=0x2) returned 1 [0232.077] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js.masked"), dwFlags=0x2) returned 1 [0232.083] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\*", lpFindFileData=0x387d64 | out: lpFindFileData=0x387d64*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdddf2400, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdddf2400, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f20 [0232.086] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdddf2400, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdddf2400, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0232.090] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdddf2400, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdddf2400, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0232.094] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdddf2400, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdddf2400, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0232.098] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdde18560, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdde18560, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0232.105] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdde18560, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdde18560, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0232.111] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdde18560, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdde18560, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0232.115] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdde3e6c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdde3e6c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0232.119] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857e1690, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdde3e6c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdde3e6c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0232.123] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdde3e6c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdde3e6c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0232.127] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdde64820, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdde64820, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0232.131] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdde64820, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdde64820, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0232.135] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdde64820, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdde64820, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0232.139] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdde64820, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdde64820, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0232.143] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdde8a980, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdde8a980, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0232.147] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdde8a980, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdde8a980, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0232.154] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdde8a980, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdde8a980, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0232.158] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xddeb0ae0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xddeb0ae0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0232.163] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xddeb0ae0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xddeb0ae0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0232.169] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xddeb0ae0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xddeb0ae0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0232.173] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xddeb0ae0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xddeb0ae0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0232.177] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdded6c40, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdded6c40, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0232.181] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdded6c40, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdded6c40, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0232.185] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdded6c40, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdded6c40, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0232.189] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdded6c40, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdded6c40, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0232.195] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xddefcda0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xddefcda0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0232.200] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xddefcda0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xddefcda0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0232.203] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xddefcda0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xddefcda0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0232.208] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xddf22f00, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xddf22f00, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0232.212] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ab50b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xddf22f00, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xddf22f00, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0232.216] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ab50b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xddf22f00, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xddf22f00, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0232.220] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ab50b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xddf22f00, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xddf22f00, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0232.224] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85adb210, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xddf49060, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xddf49060, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0232.228] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85adb210, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xddf49060, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xddf49060, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0232.234] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85adb210, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xddf49060, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xddf49060, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0232.238] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xddf6f1c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xddf6f1c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0232.242] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xddf6f1c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xddf6f1c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0232.245] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xddf6f1c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xddf6f1c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0232.250] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xddf6f1c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xddf6f1c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0232.254] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b274d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xddf95320, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xddf95320, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0232.258] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b274d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xddf95320, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xddf95320, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0232.261] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b274d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xddf95320, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xddf95320, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0232.265] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b4d630, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xddf95320, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xddf95320, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0232.269] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\*", lpFindFileData=0x387d64 | out: lpFindFileData=0x387d64*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b998f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xddfbb480, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xddfbb480, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f20 [0232.273] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\*", lpFindFileData=0x38902c | out: lpFindFileData=0x38902c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80d1a580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xddfbb480, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xddfbb480, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555ea0 [0232.278] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\*", lpFindFileData=0x3886c8 | out: lpFindFileData=0x3886c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xddfbb480, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xddfbb480, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555ee0 [0232.284] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png.masked"), dwFlags=0x2) returned 1 [0232.287] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png.masked"), dwFlags=0x2) returned 1 [0232.289] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html.masked"), dwFlags=0x2) returned 1 [0232.291] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js.masked"), dwFlags=0x2) returned 1 [0232.301] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\*", lpFindFileData=0x387d64 | out: lpFindFileData=0x387d64*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xde007740, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xde007740, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f20 [0232.304] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xde007740, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xde007740, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0232.308] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xde007740, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xde007740, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0232.312] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xde007740, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xde007740, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0232.316] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xde02d8a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xde02d8a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0232.321] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xde02d8a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xde02d8a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0232.324] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xde02d8a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xde02d8a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0232.329] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xde02d8a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xde02d8a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0232.333] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xde053a00, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xde053a00, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0232.337] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xde053a00, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xde053a00, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0232.341] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xde053a00, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xde053a00, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0232.345] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xde053a00, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xde053a00, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0232.351] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xde079b60, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xde079b60, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0232.356] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xde079b60, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xde079b60, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0232.361] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xde079b60, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xde079b60, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0232.366] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xde09fcc0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xde09fcc0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0232.371] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xde09fcc0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xde09fcc0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0232.376] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xde09fcc0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xde09fcc0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0232.381] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xde0c5e20, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xde0c5e20, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0232.385] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xde0c5e20, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xde0c5e20, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0232.390] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xde0c5e20, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xde0c5e20, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0232.395] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xde0ebf80, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xde0ebf80, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0232.400] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xde0ebf80, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xde0ebf80, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0232.407] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865abaf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xde0ebf80, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xde0ebf80, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0232.411] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865abaf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xde1120e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xde1120e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0232.415] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865d1c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xde1120e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xde1120e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0232.419] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865d1c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xde1120e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xde1120e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0232.423] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865f7db0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xde1120e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xde1120e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0232.429] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8661df10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xde138240, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xde138240, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0232.434] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86644070, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xde138240, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xde138240, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0232.439] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86644070, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xde138240, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xde138240, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0232.443] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8666a1d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xde15e3a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xde15e3a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0232.447] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86690330, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xde15e3a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xde15e3a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0232.451] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866b6490, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xde15e3a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xde15e3a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0232.467] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866b6490, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xde184500, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xde184500, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0232.473] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xde1aa660, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xde1aa660, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0232.477] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xde1aa660, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xde1aa660, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0232.525] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xde21ca80, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xde21ca80, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0232.529] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xde21ca80, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xde21ca80, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0232.533] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xde242be0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xde242be0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0232.538] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xde242be0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xde242be0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0232.542] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xde242be0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xde242be0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0232.547] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xde242be0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xde242be0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0232.551] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\*", lpFindFileData=0x387d64 | out: lpFindFileData=0x387d64*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x867288b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xde268d40, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xde268d40, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f20 [0232.556] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\*", lpFindFileData=0x38902c | out: lpFindFileData=0x38902c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x819d0bd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xde268d40, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xde268d40, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555ea0 [0232.564] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\*", lpFindFileData=0x3886c8 | out: lpFindFileData=0x3886c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e26950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xde268d40, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xde268d40, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555ee0 [0232.574] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png.masked"), dwFlags=0x2) returned 1 [0232.580] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\*", lpFindFileData=0x387d64 | out: lpFindFileData=0x387d64*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e26950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xde2b5000, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xde2b5000, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f20 [0232.584] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xde2b5000, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xde2b5000, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0232.589] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xde2b5000, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xde2b5000, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0232.592] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xde2b5000, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xde2b5000, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0232.597] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xde2db160, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xde2db160, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0232.600] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xde2db160, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xde2db160, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0232.605] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xde2db160, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xde2db160, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0232.608] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xde2db160, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xde2db160, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0232.613] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xde3012c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xde3012c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0232.617] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xde3012c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xde3012c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0232.624] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xde3012c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xde3012c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0232.629] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xde327420, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xde327420, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0232.634] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xde327420, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xde327420, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0232.639] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ebeed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xde327420, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xde327420, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0232.644] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ebeed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xde34d580, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xde34d580, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0232.649] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ebeed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xde34d580, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xde34d580, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0232.655] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xde34d580, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xde34d580, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0232.699] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xde3bf9a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xde3bf9a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0232.994] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xde6933c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xde6933c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0233.002] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xde6b9520, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xde6b9520, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0233.047] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xde7057e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xde7057e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0233.090] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xde751aa0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xde751aa0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0233.168] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xde8362e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xde8362e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0233.290] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xde940c80, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xde940c80, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0233.295] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xde966de0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xde966de0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0233.300] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xde98cf40, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xde98cf40, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0233.305] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xde98cf40, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xde98cf40, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0233.312] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xde98cf40, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xde98cf40, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0233.331] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xde9d9200, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xde9d9200, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0233.343] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xde9d9200, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xde9d9200, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0233.348] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xde9ff360, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xde9ff360, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0233.364] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdea254c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdea254c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0233.374] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdea254c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdea254c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0233.386] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdea4b620, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdea4b620, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0233.402] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdea71780, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdea71780, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0233.440] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdeae3ba0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdeae3ba0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0233.446] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fc9870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdeae3ba0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdeae3ba0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0233.519] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fc9870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdeba2280, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdeba2280, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0233.611] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fc9870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdec86ac0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdec86ac0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0233.669] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdecf8ee0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdecf8ee0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0233.813] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdee75ca0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdee75ca0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0233.832] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdee9be00, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdee9be00, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0233.841] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdee9be00, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdee9be00, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0233.852] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdeec1f60, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdeec1f60, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0233.870] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdeee80c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdeee80c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0233.875] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\*", lpFindFileData=0x387d64 | out: lpFindFileData=0x387d64*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x87015b30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdef0e220, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdef0e220, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f20 [0233.918] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\*", lpFindFileData=0x38902c | out: lpFindFileData=0x38902c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81a42ff0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdef0e220, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdef0e220, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555ea0 [0233.927] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\*", lpFindFileData=0x3886c8 | out: lpFindFileData=0x3886c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdef80640, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdef80640, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555ee0 [0233.933] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png.masked"), dwFlags=0x2) returned 1 [0233.938] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\*", lpFindFileData=0x387d64 | out: lpFindFileData=0x387d64*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdefa67a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdefa67a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f20 [0233.941] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdefa67a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdefa67a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0233.945] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdefa67a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdefa67a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0233.949] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdefa67a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdefa67a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0233.966] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdefcc900, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdefcc900, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0233.970] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdeff2a60, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdeff2a60, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0233.976] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdeff2a60, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdeff2a60, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0233.980] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdeff2a60, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdeff2a60, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0233.985] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdf018bc0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdf018bc0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0233.991] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdf018bc0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdf018bc0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0233.996] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdf018bc0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdf018bc0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0234.001] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdf03ed20, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdf03ed20, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0234.006] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdf03ed20, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdf03ed20, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0234.010] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdf03ed20, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdf03ed20, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0234.018] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdf064e80, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdf064e80, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0234.022] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdf064e80, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdf064e80, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0234.028] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdf064e80, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdf064e80, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0234.032] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdf08afe0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdf08afe0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0234.037] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdf08afe0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdf08afe0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0234.041] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdf08afe0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdf08afe0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0234.047] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdf0b1140, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdf0b1140, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0234.051] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdf0b1140, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdf0b1140, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0234.058] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdf0b1140, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdf0b1140, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0234.062] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdf0d72a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdf0d72a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0234.068] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdf0d72a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdf0d72a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0234.072] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdf0d72a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdf0d72a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0234.078] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdf0fd400, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdf0fd400, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0234.082] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdf0fd400, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdf0fd400, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0234.087] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdf0fd400, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdf0fd400, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0234.092] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdf0fd400, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdf0fd400, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0234.097] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdf123560, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdf123560, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0234.101] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdf123560, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdf123560, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0234.107] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdf123560, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdf123560, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0234.111] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdf1496c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdf1496c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0234.119] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdf1496c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdf1496c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0234.124] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdf1496c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdf1496c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0234.128] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdf16f820, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdf16f820, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0234.134] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdf16f820, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdf16f820, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0234.138] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85348a70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdf16f820, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdf16f820, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0234.142] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85348a70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdf195980, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdf195980, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0234.145] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\*", lpFindFileData=0x387d64 | out: lpFindFileData=0x387d64*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85348a70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdf195980, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdf195980, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f20 [0234.149] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\*", lpFindFileData=0x38902c | out: lpFindFileData=0x38902c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x844bb8e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdf195980, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdf195980, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555ea0 [0234.172] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\*", lpFindFileData=0x3886c8 | out: lpFindFileData=0x3886c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8401b790, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdf1e1c40, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdf1e1c40, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555ee0 [0234.183] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png.masked"), dwFlags=0x2) returned 1 [0234.221] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png.masked"), dwFlags=0x2) returned 1 [0234.229] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html.masked"), dwFlags=0x2) returned 1 [0234.232] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.js.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.js.masked"), dwFlags=0x2) returned 1 [0234.238] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\*", lpFindFileData=0x387d64 | out: lpFindFileData=0x387d64*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8402f010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdf27a1c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdf27a1c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f20 [0234.242] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84036540, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdf27a1c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdf27a1c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0234.247] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x840512f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdf27a1c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdf27a1c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0234.254] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84062460, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdf2a0320, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdf2a0320, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0234.258] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8406e7b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdf2a0320, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdf2a0320, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0234.262] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8408bc70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdf2a0320, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdf2a0320, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0234.266] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84097fc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdf2c6480, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdf2c6480, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0234.270] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841147f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdf2c6480, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdf2c6480, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0234.296] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8411bd20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdf2ec5e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdf2ec5e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0234.301] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8412a780, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdf312740, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdf312740, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0234.310] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84131cb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdf312740, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdf312740, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0234.315] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841391e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdf3388a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdf3388a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0234.333] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84140710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdf35ea00, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdf35ea00, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0234.340] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84147c40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdf35ea00, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdf35ea00, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0234.357] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84153f90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdf384b60, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdf384b60, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0234.368] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8415b4c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdf3aacc0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdf3aacc0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0234.378] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841629f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdf3d0e20, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdf3d0e20, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0234.384] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84169f20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdf3d0e20, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdf3d0e20, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0234.396] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84171450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdf3f6f80, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdf3f6f80, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0234.401] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84176270, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdf3f6f80, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdf3f6f80, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0234.410] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8417feb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdf41d0e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdf41d0e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0234.438] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841873e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdf4693a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdf4693a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0234.530] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8418e910, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdf54dbe0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdf54dbe0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0234.536] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84195e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdf54dbe0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdf54dbe0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0234.545] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8419fa80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdf54dbe0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdf54dbe0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0234.558] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841a6fb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdf573d40, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdf573d40, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0234.580] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841ae4e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdf5c0000, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdf5c0000, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0234.589] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841b5a10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdf5c0000, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdf5c0000, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0234.626] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841bcf40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdf632420, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdf632420, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0234.643] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841c6b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdf658580, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdf658580, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0234.702] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841ce0b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdf6f0b00, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdf6f0b00, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0234.710] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841d55e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdf6f0b00, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdf6f0b00, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0234.725] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841dcb10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdf716c60, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdf716c60, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0234.730] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841eb570, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdf716c60, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdf716c60, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0234.738] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841f51b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdf73cdc0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdf73cdc0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0234.748] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841fc6e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdf762f20, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdf762f20, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0234.759] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84203c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdf762f20, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdf762f20, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0234.763] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8420b140, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdf762f20, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdf762f20, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0234.767] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84212670, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdf789080, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdf789080, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0234.772] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84219ba0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdf789080, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdf789080, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0234.777] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x842210d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdf789080, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdf789080, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0234.783] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84228600, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdf7af1e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdf7af1e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0234.787] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8422fb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdf7af1e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdf7af1e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0234.791] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\*", lpFindFileData=0x387d64 | out: lpFindFileData=0x387d64*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x842481d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdf7af1e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdf7af1e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f20 [0234.795] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\*", lpFindFileData=0x38902c | out: lpFindFileData=0x38902c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x862fc2f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdf7d5340, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdf7d5340, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555ea0 [0234.799] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\*", lpFindFileData=0x3886c8 | out: lpFindFileData=0x3886c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dd4d90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdf7d5340, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdf7d5340, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555ee0 [0234.808] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png.masked"), dwFlags=0x2) returned 1 [0234.855] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js.masked"), dwFlags=0x2) returned 1 [0234.920] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js.masked"), dwFlags=0x2) returned 1 [0234.970] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js.masked"), dwFlags=0x2) returned 1 [0235.019] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\*", lpFindFileData=0x387d64 | out: lpFindFileData=0x387d64*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dd4d90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdf9ea680, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdf9ea680, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f20 [0235.093] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\@@_OpenTheBrowserTOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\@@_openthebrowsertor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.139] GetFileType (hFile=0x90) returned 0x1 [0235.141] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\@@_îòêðûòü_â_áðàóçåðå_tor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.186] GetFileType (hFile=0x90) returned 0x1 [0235.188] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dd4d90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdfb67440, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdfb67440, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0235.188] FindClose (in: hFindFile=0x555f60 | out: hFindFile=0x555f60) returned 1 [0235.189] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\@@_OpenTheBrowserTOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\@@_openthebrowsertor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.190] GetFileType (hFile=0x90) returned 0x1 [0235.191] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\@@_îòêðûòü_â_áðàóçåðå_tor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.235] GetFileType (hFile=0x90) returned 0x1 [0235.236] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdfbd9860, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdfbd9860, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0235.237] FindClose (in: hFindFile=0x555f60 | out: hFindFile=0x555f60) returned 1 [0235.238] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\@@_OpenTheBrowserTOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\@@_openthebrowsertor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.279] GetFileType (hFile=0x90) returned 0x1 [0235.281] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\@@_îòêðûòü_â_áðàóçåðå_tor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.326] GetFileType (hFile=0x90) returned 0x1 [0235.327] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdfcbe0a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdfcbe0a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0235.328] FindClose (in: hFindFile=0x555f60 | out: hFindFile=0x555f60) returned 1 [0235.328] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\@@_OpenTheBrowserTOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\@@_openthebrowsertor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.329] GetFileType (hFile=0x90) returned 0x1 [0235.330] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\@@_îòêðûòü_â_áðàóçåðå_tor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.374] GetFileType (hFile=0x90) returned 0x1 [0235.375] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdfd304c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdfd304c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0235.375] FindClose (in: hFindFile=0x555f60 | out: hFindFile=0x555f60) returned 1 [0235.376] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\@@_OpenTheBrowserTOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\@@_openthebrowsertor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.419] GetFileType (hFile=0x90) returned 0x1 [0235.420] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\@@_îòêðûòü_â_áðàóçåðå_tor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.467] GetFileType (hFile=0x90) returned 0x1 [0235.468] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdfe14d00, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdfe14d00, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0235.468] FindClose (in: hFindFile=0x555f60 | out: hFindFile=0x555f60) returned 1 [0235.469] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\@@_OpenTheBrowserTOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\@@_openthebrowsertor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.470] GetFileType (hFile=0x90) returned 0x1 [0235.471] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\@@_îòêðûòü_â_áðàóçåðå_tor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.502] GetFileType (hFile=0x90) returned 0x1 [0235.504] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdfe60fc0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdfe60fc0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0235.504] FindClose (in: hFindFile=0x555f60 | out: hFindFile=0x555f60) returned 1 [0235.505] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\@@_OpenTheBrowserTOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\@@_openthebrowsertor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.508] GetFileType (hFile=0x90) returned 0x1 [0235.509] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\@@_îòêðûòü_â_áðàóçåðå_tor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.513] GetFileType (hFile=0x90) returned 0x1 [0235.514] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdfe87120, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdfe87120, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0235.515] FindClose (in: hFindFile=0x555f60 | out: hFindFile=0x555f60) returned 1 [0235.515] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\@@_OpenTheBrowserTOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\@@_openthebrowsertor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.516] GetFileType (hFile=0x90) returned 0x1 [0235.517] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\@@_îòêðûòü_â_áðàóçåðå_tor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.529] GetFileType (hFile=0x90) returned 0x1 [0235.530] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdfead280, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdfead280, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0235.531] FindClose (in: hFindFile=0x555f60 | out: hFindFile=0x555f60) returned 1 [0235.531] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\@@_OpenTheBrowserTOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\@@_openthebrowsertor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.532] GetFileType (hFile=0x90) returned 0x1 [0235.534] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\@@_îòêðûòü_â_áðàóçåðå_tor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.536] GetFileType (hFile=0x90) returned 0x1 [0235.537] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdfead280, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdfead280, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0235.537] FindClose (in: hFindFile=0x555f60 | out: hFindFile=0x555f60) returned 1 [0235.538] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\@@_OpenTheBrowserTOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\@@_openthebrowsertor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.538] GetFileType (hFile=0x90) returned 0x1 [0235.540] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\@@_îòêðûòü_â_áðàóçåðå_tor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.541] GetFileType (hFile=0x90) returned 0x1 [0235.542] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdfead280, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdfead280, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0235.543] FindClose (in: hFindFile=0x555f60 | out: hFindFile=0x555f60) returned 1 [0235.543] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\@@_OpenTheBrowserTOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\@@_openthebrowsertor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.544] GetFileType (hFile=0x90) returned 0x1 [0235.545] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\@@_îòêðûòü_â_áðàóçåðå_tor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.547] GetFileType (hFile=0x90) returned 0x1 [0235.548] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdfed33e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdfed33e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0235.548] FindClose (in: hFindFile=0x555f60 | out: hFindFile=0x555f60) returned 1 [0235.549] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\@@_OpenTheBrowserTOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_gb\\@@_openthebrowsertor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.549] GetFileType (hFile=0x90) returned 0x1 [0235.550] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_gb\\@@_îòêðûòü_â_áðàóçåðå_tor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.552] GetFileType (hFile=0x90) returned 0x1 [0235.553] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdfed33e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdfed33e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0235.553] FindClose (in: hFindFile=0x555f60 | out: hFindFile=0x555f60) returned 1 [0235.553] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\@@_OpenTheBrowserTOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_us\\@@_openthebrowsertor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.554] GetFileType (hFile=0x90) returned 0x1 [0235.555] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_us\\@@_îòêðûòü_â_áðàóçåðå_tor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.557] GetFileType (hFile=0x90) returned 0x1 [0235.560] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdfed33e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdfed33e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0235.560] FindClose (in: hFindFile=0x555f60 | out: hFindFile=0x555f60) returned 1 [0235.561] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\@@_OpenTheBrowserTOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\@@_openthebrowsertor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.561] GetFileType (hFile=0x90) returned 0x1 [0235.562] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\@@_îòêðûòü_â_áðàóçåðå_tor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.564] GetFileType (hFile=0x90) returned 0x1 [0235.565] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdfef9540, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdfef9540, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0235.566] FindClose (in: hFindFile=0x555f60 | out: hFindFile=0x555f60) returned 1 [0235.566] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\@@_OpenTheBrowserTOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\@@_openthebrowsertor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.567] GetFileType (hFile=0x90) returned 0x1 [0235.568] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\@@_îòêðûòü_â_áðàóçåðå_tor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.570] GetFileType (hFile=0x90) returned 0x1 [0235.571] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdfef9540, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdfef9540, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0235.571] FindClose (in: hFindFile=0x555f60 | out: hFindFile=0x555f60) returned 1 [0235.572] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\@@_OpenTheBrowserTOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\@@_openthebrowsertor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.572] GetFileType (hFile=0x90) returned 0x1 [0235.573] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\@@_îòêðûòü_â_áðàóçåðå_tor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.575] GetFileType (hFile=0x90) returned 0x1 [0235.576] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdff1f6a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdff1f6a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0235.576] FindClose (in: hFindFile=0x555f60 | out: hFindFile=0x555f60) returned 1 [0235.577] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\@@_OpenTheBrowserTOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\@@_openthebrowsertor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.578] GetFileType (hFile=0x90) returned 0x1 [0235.579] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\@@_îòêðûòü_â_áðàóçåðå_tor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.581] GetFileType (hFile=0x90) returned 0x1 [0235.582] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdff1f6a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdff1f6a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0235.582] FindClose (in: hFindFile=0x555f60 | out: hFindFile=0x555f60) returned 1 [0235.582] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\@@_OpenTheBrowserTOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\@@_openthebrowsertor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.583] GetFileType (hFile=0x90) returned 0x1 [0235.584] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\@@_îòêðûòü_â_áðàóçåðå_tor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.586] GetFileType (hFile=0x90) returned 0x1 [0235.586] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdff1f6a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdff1f6a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0235.587] FindClose (in: hFindFile=0x555f60 | out: hFindFile=0x555f60) returned 1 [0235.587] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\@@_OpenTheBrowserTOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\@@_openthebrowsertor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.588] GetFileType (hFile=0x90) returned 0x1 [0235.590] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\@@_îòêðûòü_â_áðàóçåðå_tor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.591] GetFileType (hFile=0x90) returned 0x1 [0235.592] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdff45800, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdff45800, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0235.592] FindClose (in: hFindFile=0x555f60 | out: hFindFile=0x555f60) returned 1 [0235.593] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\@@_OpenTheBrowserTOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\@@_openthebrowsertor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.593] GetFileType (hFile=0x90) returned 0x1 [0235.594] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\@@_îòêðûòü_â_áðàóçåðå_tor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.596] GetFileType (hFile=0x90) returned 0x1 [0235.597] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdff45800, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdff45800, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0235.598] FindClose (in: hFindFile=0x555f60 | out: hFindFile=0x555f60) returned 1 [0235.598] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\@@_OpenTheBrowserTOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\@@_openthebrowsertor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.600] GetFileType (hFile=0x90) returned 0x1 [0235.601] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\@@_îòêðûòü_â_áðàóçåðå_tor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.602] GetFileType (hFile=0x90) returned 0x1 [0235.603] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdff45800, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdff45800, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0235.604] FindClose (in: hFindFile=0x555f60 | out: hFindFile=0x555f60) returned 1 [0235.604] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\@@_OpenTheBrowserTOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_ca\\@@_openthebrowsertor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.605] GetFileType (hFile=0x90) returned 0x1 [0235.606] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_ca\\@@_îòêðûòü_â_áðàóçåðå_tor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.610] GetFileType (hFile=0x90) returned 0x1 [0235.611] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdff6b960, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdff6b960, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0235.612] FindClose (in: hFindFile=0x555f60 | out: hFindFile=0x555f60) returned 1 [0235.612] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\@@_OpenTheBrowserTOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\@@_openthebrowsertor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.612] GetFileType (hFile=0x90) returned 0x1 [0235.614] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\@@_îòêðûòü_â_áðàóçåðå_tor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.615] GetFileType (hFile=0x90) returned 0x1 [0235.616] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdff6b960, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdff6b960, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0235.617] FindClose (in: hFindFile=0x555f60 | out: hFindFile=0x555f60) returned 1 [0235.617] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\@@_OpenTheBrowserTOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\@@_openthebrowsertor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.618] GetFileType (hFile=0x90) returned 0x1 [0235.619] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\@@_îòêðûòü_â_áðàóçåðå_tor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.621] GetFileType (hFile=0x90) returned 0x1 [0235.622] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdff6b960, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdff6b960, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0235.622] FindClose (in: hFindFile=0x555f60 | out: hFindFile=0x555f60) returned 1 [0235.623] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\@@_OpenTheBrowserTOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\@@_openthebrowsertor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.623] GetFileType (hFile=0x90) returned 0x1 [0235.624] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\@@_îòêðûòü_â_áðàóçåðå_tor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.627] GetFileType (hFile=0x90) returned 0x1 [0235.628] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdff91ac0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdff91ac0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0235.628] FindClose (in: hFindFile=0x555f60 | out: hFindFile=0x555f60) returned 1 [0235.629] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\@@_OpenTheBrowserTOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\@@_openthebrowsertor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.630] GetFileType (hFile=0x90) returned 0x1 [0235.630] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\@@_îòêðûòü_â_áðàóçåðå_tor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.632] GetFileType (hFile=0x90) returned 0x1 [0235.633] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdff91ac0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdff91ac0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0235.633] FindClose (in: hFindFile=0x555f60 | out: hFindFile=0x555f60) returned 1 [0235.634] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\@@_OpenTheBrowserTOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\@@_openthebrowsertor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.634] GetFileType (hFile=0x90) returned 0x1 [0235.635] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\@@_îòêðûòü_â_áðàóçåðå_tor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.637] GetFileType (hFile=0x90) returned 0x1 [0235.638] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdffb7c20, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdffb7c20, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0235.639] FindClose (in: hFindFile=0x555f60 | out: hFindFile=0x555f60) returned 1 [0235.639] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\@@_OpenTheBrowserTOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\@@_openthebrowsertor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.640] GetFileType (hFile=0x90) returned 0x1 [0235.641] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\@@_îòêðûòü_â_áðàóçåðå_tor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.643] GetFileType (hFile=0x90) returned 0x1 [0235.644] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdffb7c20, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdffb7c20, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0235.645] FindClose (in: hFindFile=0x555f60 | out: hFindFile=0x555f60) returned 1 [0235.645] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\@@_OpenTheBrowserTOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\@@_openthebrowsertor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.646] GetFileType (hFile=0x90) returned 0x1 [0235.647] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\@@_îòêðûòü_â_áðàóçåðå_tor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.649] GetFileType (hFile=0x90) returned 0x1 [0235.650] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdffb7c20, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdffb7c20, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0235.650] FindClose (in: hFindFile=0x555f60 | out: hFindFile=0x555f60) returned 1 [0235.650] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\@@_OpenTheBrowserTOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\@@_openthebrowsertor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.652] GetFileType (hFile=0x90) returned 0x1 [0235.653] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\@@_îòêðûòü_â_áðàóçåðå_tor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.657] GetFileType (hFile=0x90) returned 0x1 [0235.658] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdffddd80, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdffddd80, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0235.658] FindClose (in: hFindFile=0x555f60 | out: hFindFile=0x555f60) returned 1 [0235.659] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\@@_OpenTheBrowserTOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\@@_openthebrowsertor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.659] GetFileType (hFile=0x90) returned 0x1 [0235.660] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\@@_îòêðûòü_â_áðàóçåðå_tor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.665] GetFileType (hFile=0x90) returned 0x1 [0235.666] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdffddd80, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xdffddd80, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0235.666] FindClose (in: hFindFile=0x555f60 | out: hFindFile=0x555f60) returned 1 [0235.667] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\@@_OpenTheBrowserTOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\@@_openthebrowsertor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.668] GetFileType (hFile=0x90) returned 0x1 [0235.669] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\@@_îòêðûòü_â_áðàóçåðå_tor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.675] GetFileType (hFile=0x90) returned 0x1 [0235.676] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe0003ee0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe0003ee0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0235.676] FindClose (in: hFindFile=0x555f60 | out: hFindFile=0x555f60) returned 1 [0235.677] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\@@_OpenTheBrowserTOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\@@_openthebrowsertor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.677] GetFileType (hFile=0x90) returned 0x1 [0235.678] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\@@_îòêðûòü_â_áðàóçåðå_tor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.725] GetFileType (hFile=0x90) returned 0x1 [0235.726] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe0076300, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe0076300, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0235.726] FindClose (in: hFindFile=0x555f60 | out: hFindFile=0x555f60) returned 1 [0235.727] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\@@_OpenTheBrowserTOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\@@_openthebrowsertor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.731] GetFileType (hFile=0x90) returned 0x1 [0235.732] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\@@_îòêðûòü_â_áðàóçåðå_tor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.735] GetFileType (hFile=0x90) returned 0x1 [0235.736] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe009c460, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe009c460, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0235.736] FindClose (in: hFindFile=0x555f60 | out: hFindFile=0x555f60) returned 1 [0235.737] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\@@_OpenTheBrowserTOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\@@_openthebrowsertor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.737] GetFileType (hFile=0x90) returned 0x1 [0235.739] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\@@_îòêðûòü_â_áðàóçåðå_tor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.778] GetFileType (hFile=0x90) returned 0x1 [0235.780] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe010e880, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe010e880, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0235.780] FindClose (in: hFindFile=0x555f60 | out: hFindFile=0x555f60) returned 1 [0235.805] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\@@_OpenTheBrowserTOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\@@_openthebrowsertor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.807] GetFileType (hFile=0x90) returned 0x1 [0235.808] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\@@_îòêðûòü_â_áðàóçåðå_tor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.811] GetFileType (hFile=0x90) returned 0x1 [0235.812] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe015ab40, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe015ab40, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0235.812] FindClose (in: hFindFile=0x555f60 | out: hFindFile=0x555f60) returned 1 [0235.813] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\@@_OpenTheBrowserTOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\@@_openthebrowsertor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.813] GetFileType (hFile=0x90) returned 0x1 [0235.814] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\@@_îòêðûòü_â_áðàóçåðå_tor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.816] GetFileType (hFile=0x90) returned 0x1 [0235.817] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe015ab40, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe015ab40, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0235.817] FindClose (in: hFindFile=0x555f60 | out: hFindFile=0x555f60) returned 1 [0235.818] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\@@_OpenTheBrowserTOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\@@_openthebrowsertor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.821] GetFileType (hFile=0x90) returned 0x1 [0235.822] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\@@_îòêðûòü_â_áðàóçåðå_tor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.823] GetFileType (hFile=0x90) returned 0x1 [0235.824] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe015ab40, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe015ab40, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0235.825] FindClose (in: hFindFile=0x555f60 | out: hFindFile=0x555f60) returned 1 [0235.825] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\@@_OpenTheBrowserTOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\@@_openthebrowsertor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.826] GetFileType (hFile=0x90) returned 0x1 [0235.827] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\@@_îòêðûòü_â_áðàóçåðå_tor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.829] GetFileType (hFile=0x90) returned 0x1 [0235.830] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe0180ca0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe0180ca0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0235.830] FindClose (in: hFindFile=0x555f60 | out: hFindFile=0x555f60) returned 1 [0235.830] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\@@_OpenTheBrowserTOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\@@_openthebrowsertor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.831] GetFileType (hFile=0x90) returned 0x1 [0235.832] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\@@_îòêðûòü_â_áðàóçåðå_tor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.834] GetFileType (hFile=0x90) returned 0x1 [0235.835] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe0180ca0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe0180ca0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0235.835] FindClose (in: hFindFile=0x555f60 | out: hFindFile=0x555f60) returned 1 [0235.836] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\@@_OpenTheBrowserTOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\@@_openthebrowsertor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.836] GetFileType (hFile=0x90) returned 0x1 [0235.837] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\@@_îòêðûòü_â_áðàóçåðå_tor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.840] GetFileType (hFile=0x90) returned 0x1 [0235.841] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe01a6e00, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe01a6e00, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0235.841] FindClose (in: hFindFile=0x555f60 | out: hFindFile=0x555f60) returned 1 [0235.842] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\@@_OpenTheBrowserTOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\@@_openthebrowsertor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.843] GetFileType (hFile=0x90) returned 0x1 [0235.844] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\@@_îòêðûòü_â_áðàóçåðå_tor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.846] GetFileType (hFile=0x90) returned 0x1 [0235.847] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe01a6e00, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe01a6e00, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0235.847] FindClose (in: hFindFile=0x555f60 | out: hFindFile=0x555f60) returned 1 [0235.847] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\@@_OpenTheBrowserTOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\@@_openthebrowsertor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.859] GetFileType (hFile=0x90) returned 0x1 [0235.861] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\@@_îòêðûòü_â_áðàóçåðå_tor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.862] GetFileType (hFile=0x90) returned 0x1 [0235.863] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe01ccf60, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe01ccf60, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0235.864] FindClose (in: hFindFile=0x555f60 | out: hFindFile=0x555f60) returned 1 [0235.864] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\@@_OpenTheBrowserTOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\@@_openthebrowsertor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.865] GetFileType (hFile=0x90) returned 0x1 [0235.866] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\@@_îòêðûòü_â_áðàóçåðå_tor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.868] GetFileType (hFile=0x90) returned 0x1 [0235.869] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f2e100, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe01ccf60, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe01ccf60, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0235.869] FindClose (in: hFindFile=0x555f60 | out: hFindFile=0x555f60) returned 1 [0235.870] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\@@_OpenTheBrowserTOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\@@_openthebrowsertor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.871] GetFileType (hFile=0x90) returned 0x1 [0235.872] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\@@_îòêðûòü_â_áðàóçåðå_tor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.873] GetFileType (hFile=0x90) returned 0x1 [0235.874] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f2e100, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe01f30c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe01f30c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0235.875] FindClose (in: hFindFile=0x555f60 | out: hFindFile=0x555f60) returned 1 [0235.875] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\@@_OpenTheBrowserTOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\@@_openthebrowsertor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.876] GetFileType (hFile=0x90) returned 0x1 [0235.877] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\@@_îòêðûòü_â_áðàóçåðå_tor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.879] GetFileType (hFile=0x90) returned 0x1 [0235.880] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f2e100, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe01f30c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe01f30c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0235.881] FindClose (in: hFindFile=0x555f60 | out: hFindFile=0x555f60) returned 1 [0235.881] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\@@_OpenTheBrowserTOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\@@_openthebrowsertor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.882] GetFileType (hFile=0x90) returned 0x1 [0235.883] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\@@_îòêðûòü_â_áðàóçåðå_tor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.884] GetFileType (hFile=0x90) returned 0x1 [0235.885] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe01f30c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe01f30c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0235.886] FindClose (in: hFindFile=0x555f60 | out: hFindFile=0x555f60) returned 1 [0235.886] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\@@_OpenTheBrowserTOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\@@_openthebrowsertor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.887] GetFileType (hFile=0x90) returned 0x1 [0235.888] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\@@_îòêðûòü_â_áðàóçåðå_tor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.890] GetFileType (hFile=0x90) returned 0x1 [0235.891] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe0219220, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe0219220, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0235.891] FindClose (in: hFindFile=0x555f60 | out: hFindFile=0x555f60) returned 1 [0235.892] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR\\@@_OpenTheBrowserTOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_br\\@@_openthebrowsertor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.892] GetFileType (hFile=0x90) returned 0x1 [0235.893] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_br\\@@_îòêðûòü_â_áðàóçåðå_tor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.895] GetFileType (hFile=0x90) returned 0x1 [0235.896] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe0219220, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe0219220, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0235.896] FindClose (in: hFindFile=0x555f60 | out: hFindFile=0x555f60) returned 1 [0235.897] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT\\@@_OpenTheBrowserTOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_pt\\@@_openthebrowsertor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.898] GetFileType (hFile=0x90) returned 0x1 [0235.899] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_pt\\@@_îòêðûòü_â_áðàóçåðå_tor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.900] GetFileType (hFile=0x90) returned 0x1 [0235.902] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe0219220, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe0219220, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0235.902] FindClose (in: hFindFile=0x555f60 | out: hFindFile=0x555f60) returned 1 [0235.902] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\@@_OpenTheBrowserTOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\@@_openthebrowsertor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.903] GetFileType (hFile=0x90) returned 0x1 [0235.904] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\@@_îòêðûòü_â_áðàóçåðå_tor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.906] GetFileType (hFile=0x90) returned 0x1 [0235.906] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe023f380, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe023f380, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0235.907] FindClose (in: hFindFile=0x555f60 | out: hFindFile=0x555f60) returned 1 [0235.907] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\@@_OpenTheBrowserTOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\@@_openthebrowsertor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.908] GetFileType (hFile=0x90) returned 0x1 [0235.910] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\@@_îòêðûòü_â_áðàóçåðå_tor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.912] GetFileType (hFile=0x90) returned 0x1 [0235.912] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe023f380, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe023f380, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0235.913] FindClose (in: hFindFile=0x555f60 | out: hFindFile=0x555f60) returned 1 [0235.913] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\@@_OpenTheBrowserTOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\@@_openthebrowsertor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.914] GetFileType (hFile=0x90) returned 0x1 [0235.915] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\@@_îòêðûòü_â_áðàóçåðå_tor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.916] GetFileType (hFile=0x90) returned 0x1 [0235.918] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe023f380, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe023f380, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0235.918] FindClose (in: hFindFile=0x555f60 | out: hFindFile=0x555f60) returned 1 [0235.919] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\@@_OpenTheBrowserTOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\@@_openthebrowsertor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.920] GetFileType (hFile=0x90) returned 0x1 [0235.921] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\@@_îòêðûòü_â_áðàóçåðå_tor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.922] GetFileType (hFile=0x90) returned 0x1 [0235.923] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe02654e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe02654e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0235.924] FindClose (in: hFindFile=0x555f60 | out: hFindFile=0x555f60) returned 1 [0235.924] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\@@_OpenTheBrowserTOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\@@_openthebrowsertor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.925] GetFileType (hFile=0x90) returned 0x1 [0235.926] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\@@_îòêðûòü_â_áðàóçåðå_tor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.928] GetFileType (hFile=0x90) returned 0x1 [0235.928] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe02654e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe02654e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0235.929] FindClose (in: hFindFile=0x555f60 | out: hFindFile=0x555f60) returned 1 [0235.929] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\@@_OpenTheBrowserTOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\@@_openthebrowsertor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.930] GetFileType (hFile=0x90) returned 0x1 [0235.931] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\@@_îòêðûòü_â_áðàóçåðå_tor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.933] GetFileType (hFile=0x90) returned 0x1 [0235.934] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe028b640, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe028b640, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0235.934] FindClose (in: hFindFile=0x555f60 | out: hFindFile=0x555f60) returned 1 [0235.935] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\@@_OpenTheBrowserTOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\@@_openthebrowsertor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.935] GetFileType (hFile=0x90) returned 0x1 [0235.936] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\@@_îòêðûòü_â_áðàóçåðå_tor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.939] GetFileType (hFile=0x90) returned 0x1 [0235.940] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe028b640, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe028b640, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0235.940] FindClose (in: hFindFile=0x555f60 | out: hFindFile=0x555f60) returned 1 [0235.941] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\@@_OpenTheBrowserTOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\@@_openthebrowsertor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.942] GetFileType (hFile=0x90) returned 0x1 [0235.943] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\@@_îòêðûòü_â_áðàóçåðå_tor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.945] GetFileType (hFile=0x90) returned 0x1 [0235.945] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe028b640, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe028b640, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0235.946] FindClose (in: hFindFile=0x555f60 | out: hFindFile=0x555f60) returned 1 [0235.946] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\@@_OpenTheBrowserTOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\@@_openthebrowsertor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.947] GetFileType (hFile=0x90) returned 0x1 [0235.948] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\@@_îòêðûòü_â_áðàóçåðå_tor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.950] GetFileType (hFile=0x90) returned 0x1 [0235.951] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe02b17a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe02b17a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0235.951] FindClose (in: hFindFile=0x555f60 | out: hFindFile=0x555f60) returned 1 [0235.951] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\@@_OpenTheBrowserTOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\@@_openthebrowsertor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.952] GetFileType (hFile=0x90) returned 0x1 [0235.954] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\@@_îòêðûòü_â_áðàóçåðå_tor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.955] GetFileType (hFile=0x90) returned 0x1 [0235.956] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe02b17a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe02b17a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0235.957] FindClose (in: hFindFile=0x555f60 | out: hFindFile=0x555f60) returned 1 [0235.957] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\@@_OpenTheBrowserTOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\@@_openthebrowsertor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.957] GetFileType (hFile=0x90) returned 0x1 [0235.958] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\@@_îòêðûòü_â_áðàóçåðå_tor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.960] GetFileType (hFile=0x90) returned 0x1 [0235.961] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe02b17a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe02b17a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0235.961] FindClose (in: hFindFile=0x555f60 | out: hFindFile=0x555f60) returned 1 [0235.962] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\@@_OpenTheBrowserTOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\@@_openthebrowsertor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.963] GetFileType (hFile=0x90) returned 0x1 [0235.964] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\@@_îòêðûòü_â_áðàóçåðå_tor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.966] GetFileType (hFile=0x90) returned 0x1 [0235.967] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe02d7900, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe02d7900, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0235.967] FindClose (in: hFindFile=0x555f60 | out: hFindFile=0x555f60) returned 1 [0235.968] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\@@_OpenTheBrowserTOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\@@_openthebrowsertor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.968] GetFileType (hFile=0x90) returned 0x1 [0235.969] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\@@_îòêðûòü_â_áðàóçåðå_tor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.971] GetFileType (hFile=0x90) returned 0x1 [0235.972] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe02d7900, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe02d7900, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0235.972] FindClose (in: hFindFile=0x555f60 | out: hFindFile=0x555f60) returned 1 [0235.973] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\@@_OpenTheBrowserTOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\@@_openthebrowsertor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.974] GetFileType (hFile=0x90) returned 0x1 [0235.975] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\@@_îòêðûòü_â_áðàóçåðå_tor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.980] GetFileType (hFile=0x90) returned 0x1 [0235.981] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe02d7900, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe02d7900, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0235.981] FindClose (in: hFindFile=0x555f60 | out: hFindFile=0x555f60) returned 1 [0235.982] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\@@_OpenTheBrowserTOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\@@_openthebrowsertor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.982] GetFileType (hFile=0x90) returned 0x1 [0235.983] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\@@_îòêðûòü_â_áðàóçåðå_tor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.985] GetFileType (hFile=0x90) returned 0x1 [0235.986] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe02fda60, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe02fda60, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0235.986] FindClose (in: hFindFile=0x555f60 | out: hFindFile=0x555f60) returned 1 [0235.987] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\@@_OpenTheBrowserTOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_cn\\@@_openthebrowsertor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.988] GetFileType (hFile=0x90) returned 0x1 [0235.989] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_cn\\@@_îòêðûòü_â_áðàóçåðå_tor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.991] GetFileType (hFile=0x90) returned 0x1 [0235.992] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe02fda60, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe02fda60, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0235.993] FindClose (in: hFindFile=0x555f60 | out: hFindFile=0x555f60) returned 1 [0235.993] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\@@_OpenTheBrowserTOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_hk\\@@_openthebrowsertor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.994] GetFileType (hFile=0x90) returned 0x1 [0235.994] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_hk\\@@_îòêðûòü_â_áðàóçåðå_tor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.996] GetFileType (hFile=0x90) returned 0x1 [0235.997] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe0323bc0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe0323bc0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0235.998] FindClose (in: hFindFile=0x555f60 | out: hFindFile=0x555f60) returned 1 [0235.998] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\@@_OpenTheBrowserTOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_tw\\@@_openthebrowsertor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0235.999] GetFileType (hFile=0x90) returned 0x1 [0236.000] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_tw\\@@_îòêðûòü_â_áðàóçåðå_tor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0236.002] GetFileType (hFile=0x90) returned 0x1 [0236.003] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe0323bc0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe0323bc0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0236.004] FindClose (in: hFindFile=0x555f60 | out: hFindFile=0x555f60) returned 1 [0236.004] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\@@_OpenTheBrowserTOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\@@_openthebrowsertor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0236.004] GetFileType (hFile=0x90) returned 0x1 [0236.005] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\@@_îòêðûòü_â_áðàóçåðå_tor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387100, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0236.007] GetFileType (hFile=0x90) returned 0x1 [0236.008] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe0323bc0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe0323bc0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0236.008] FindClose (in: hFindFile=0x555f60 | out: hFindFile=0x555f60) returned 1 [0236.009] FindClose (in: hFindFile=0x555f20 | out: hFindFile=0x555f20) returned 1 [0236.009] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\@@_OpenTheBrowserTOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\@@_openthebrowsertor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387a64, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x8c [0236.012] GetFileType (hFile=0x8c) returned 0x1 [0236.013] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\@@_îòêðûòü_â_áðàóçåðå_tor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x387a64, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x8c [0236.013] GetFileType (hFile=0x8c) returned 0x1 [0236.014] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\*", lpFindFileData=0x387d64 | out: lpFindFileData=0x387d64*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86012940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe0349d20, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe0349d20, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f20 [0236.014] FindClose (in: hFindFile=0x555f20 | out: hFindFile=0x555f20) returned 1 [0236.015] FindClose (in: hFindFile=0x555ee0 | out: hFindFile=0x555ee0) returned 1 [0236.015] FindClose (in: hFindFile=0x555ea0 | out: hFindFile=0x555ea0) returned 1 [0236.016] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\@@_OpenTheBrowserTOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\@@_openthebrowsertor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x388d2c, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x84 [0236.017] GetFileType (hFile=0x84) returned 0x1 [0236.018] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\@@_îòêðûòü_â_áðàóçåðå_tor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x388d2c, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x84 [0236.020] GetFileType (hFile=0x84) returned 0x1 [0236.021] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\*", lpFindFileData=0x38902c | out: lpFindFileData=0x38902c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82ab7660, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe0349d20, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe0349d20, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555ea0 [0236.021] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\@@_OpenTheBrowserTOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\@@_openthebrowsertor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3883c8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x88 [0236.024] GetFileType (hFile=0x88) returned 0x1 [0236.025] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\@@_Îòêðûòü_Â_Áðàóçåðå_TOR_@@.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\@@_îòêðûòü_â_áðàóçåðå_tor_@@.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3883c8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x88 [0236.025] GetFileType (hFile=0x88) returned 0x1 [0236.027] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\*", lpFindFileData=0x3886c8 | out: lpFindFileData=0x3886c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82651e90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe0349d20, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe0349d20, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555ee0 [0236.027] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x38837c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x8c [0236.028] GetFileType (hFile=0x8c) returned 0x1 [0236.283] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js.masked"), dwFlags=0x2) returned 1 [0236.560] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js.masked"), dwFlags=0x2) returned 1 [0236.565] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\*", lpFindFileData=0x387d64 | out: lpFindFileData=0x387d64*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82896f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe087ed40, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe087ed40, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f20 [0236.569] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css.masked"), dwFlags=0x2) returned 1 [0236.575] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\*", lpFindFileData=0x387d64 | out: lpFindFileData=0x387d64*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8289e4a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe08a4ea0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe08a4ea0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f20 [0236.578] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html.masked"), dwFlags=0x2) returned 1 [0236.583] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\*", lpFindFileData=0x387d64 | out: lpFindFileData=0x387d64*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828a32c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe08a4ea0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe08a4ea0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f20 [0236.653] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif.masked"), dwFlags=0x2) returned 1 [0236.661] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png.masked"), dwFlags=0x2) returned 1 [0236.666] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png.masked"), dwFlags=0x2) returned 1 [0236.668] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png.masked"), dwFlags=0x2) returned 1 [0236.670] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png.masked"), dwFlags=0x2) returned 1 [0236.672] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png.masked"), dwFlags=0x2) returned 1 [0236.675] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png.masked"), dwFlags=0x2) returned 1 [0236.677] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png.masked"), dwFlags=0x2) returned 1 [0236.740] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\*", lpFindFileData=0x387d64 | out: lpFindFileData=0x387d64*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82665710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe0a21c60, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe0a21c60, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f20 [0236.766] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8266a530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe0a6df20, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe0a6df20, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0236.773] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82676880, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe0a6df20, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe0a6df20, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0236.777] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826a0090, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe0a94080, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe0a94080, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0236.784] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826ac3e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe0a94080, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe0a94080, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0236.787] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826b8730, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe0a94080, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe0a94080, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0236.792] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826c2370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe0a94080, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe0a94080, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0236.795] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826ce6c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe0aba1e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe0aba1e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0236.801] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826d8300, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe0aba1e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe0aba1e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0236.804] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826e9470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe0aba1e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe0aba1e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0236.809] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826f30b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe0ae0340, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe0ae0340, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0236.812] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826ff400, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe0ae0340, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe0ae0340, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0236.816] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82709040, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe0ae0340, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe0ae0340, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0236.820] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82715390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe0ae0340, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe0ae0340, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0236.825] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8271efd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe0b064a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe0b064a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0236.829] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82728c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe0b064a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe0b064a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0236.833] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827412b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe0b064a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe0b064a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0236.837] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8274aef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe0b064a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe0b064a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0236.841] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82752420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe0b2c600, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe0b2c600, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0236.845] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82759950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe0b2c600, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe0b2c600, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0236.849] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82763590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe0b2c600, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe0b2c600, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0236.853] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8276d1d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe0b2c600, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe0b2c600, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0236.857] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82776e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe0b52760, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe0b52760, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0236.861] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8277e340, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe0b52760, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe0b52760, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0236.865] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82787f80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe0b52760, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe0b52760, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0236.871] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82791bc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe0b52760, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe0b52760, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0236.875] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8279b800, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe0b788c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe0b788c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0236.880] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827a2d30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe0b788c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe0b788c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0236.885] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827aa260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe0b788c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe0b788c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0236.889] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827b3ea0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe0b9ea20, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe0b9ea20, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0236.893] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827c7720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe0b9ea20, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe0b9ea20, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0236.897] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827e4be0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe0b9ea20, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe0b9ea20, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0236.901] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827f5d50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe0bc4b80, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe0bc4b80, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0236.905] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828095d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe0bc4b80, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe0bc4b80, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0236.910] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8282b8b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe0bc4b80, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe0bc4b80, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0236.914] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8284db90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe0bc4b80, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe0bc4b80, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0236.919] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82863b20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe0beace0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe0beace0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0236.922] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8286b050, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe0beace0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe0beace0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0236.926] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82872580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe0beace0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe0beace0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0236.930] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82879ab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe0beace0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe0beace0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0236.934] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828836f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe0c10e40, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe0c10e40, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0236.937] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\*", lpFindFileData=0x387d64 | out: lpFindFileData=0x387d64*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828e7880, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe0c10e40, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe0c10e40, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f20 [0236.941] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\*", lpFindFileData=0x38902c | out: lpFindFileData=0x38902c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x814d6d00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe0c10e40, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe0c10e40, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555ea0 [0236.945] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\*", lpFindFileData=0x3886c8 | out: lpFindFileData=0x3886c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86989eb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe0c10e40, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe0c10e40, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555ee0 [0236.956] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png.masked"), dwFlags=0x2) returned 1 [0236.961] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\*", lpFindFileData=0x387d64 | out: lpFindFileData=0x387d64*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe0c36fa0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe0c36fa0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f20 [0236.966] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe0c5d100, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe0c5d100, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0236.969] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe0c5d100, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe0c5d100, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0236.973] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe0c5d100, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe0c5d100, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0236.978] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe0c5d100, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe0c5d100, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0236.984] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe0c83260, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe0c83260, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0236.989] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe0c83260, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe0c83260, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0236.994] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe0c83260, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe0c83260, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0236.998] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe0ca93c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe0ca93c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0237.001] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe0ca93c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe0ca93c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0237.006] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe0ca93c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe0ca93c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0237.010] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe0ccf520, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe0ccf520, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0237.014] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe0ccf520, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe0ccf520, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0237.018] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe0ccf520, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe0ccf520, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0237.022] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe0ccf520, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe0ccf520, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0237.026] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe0ccf520, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe0ccf520, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0237.031] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe0cf5680, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe0cf5680, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0237.035] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe0cf5680, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe0cf5680, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0237.038] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe0cf5680, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe0cf5680, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0237.043] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe0d1b7e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe0d1b7e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0237.046] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe0d1b7e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe0d1b7e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0237.050] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe0d1b7e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe0d1b7e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0237.053] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe0d1b7e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe0d1b7e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0237.057] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe0d41940, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe0d41940, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0237.061] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe0d41940, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe0d41940, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0237.065] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe0d41940, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe0d41940, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0237.069] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe0d41940, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe0d41940, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0237.076] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe0d67aa0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe0d67aa0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0237.080] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe0d67aa0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe0d67aa0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0237.083] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe0d67aa0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe0d67aa0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0237.087] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe0d67aa0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe0d67aa0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0237.090] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe0d8dc00, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe0d8dc00, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0237.094] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe0d8dc00, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe0d8dc00, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0237.098] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe0d8dc00, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe0d8dc00, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0237.102] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe0d8dc00, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe0d8dc00, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0237.106] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe0db3d60, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe0db3d60, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0237.109] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe0db3d60, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe0db3d60, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0237.114] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe0db3d60, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe0db3d60, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0237.118] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe0db3d60, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe0db3d60, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0237.122] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\*", lpFindFileData=0x387d64 | out: lpFindFileData=0x387d64*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe0dd9ec0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe0dd9ec0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f20 [0237.126] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\*", lpFindFileData=0x38902c | out: lpFindFileData=0x38902c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8399f510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe0dd9ec0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe0dd9ec0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555ea0 [0237.130] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\*", lpFindFileData=0x3886c8 | out: lpFindFileData=0x3886c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833dcb50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe0dd9ec0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe0dd9ec0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555ee0 [0237.657] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\angular.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\angular.js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\angular.js.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\angular.js.masked"), dwFlags=0x2) returned 1 [0237.705] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\background_script.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\background_script.js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\background_script.js.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\background_script.js.masked"), dwFlags=0x2) returned 1 [0237.802] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_game_sender.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_game_sender.js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_game_sender.js.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_game_sender.js.masked"), dwFlags=0x2) returned 1 [0237.872] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html.masked"), dwFlags=0x2) returned 1 [0238.118] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.js.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.js.masked"), dwFlags=0x2) returned 1 [0238.172] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js.masked"), dwFlags=0x2) returned 1 [0238.178] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\*", lpFindFileData=0x387d64 | out: lpFindFileData=0x387d64*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83663ae0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe17d1ae0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe17d1ae0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f20 [0238.189] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css.masked"), dwFlags=0x2) returned 1 [0238.332] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js.masked"), dwFlags=0x2) returned 1 [0238.339] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js.masked"), dwFlags=0x2) returned 1 [0238.350] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png.masked"), dwFlags=0x2) returned 1 [0238.353] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html.masked"), dwFlags=0x2) returned 1 [0238.358] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html.masked"), dwFlags=0x2) returned 1 [0238.360] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html.masked"), dwFlags=0x2) returned 1 [0238.365] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html.masked"), dwFlags=0x2) returned 1 [0238.369] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\*", lpFindFileData=0x387d64 | out: lpFindFileData=0x387d64*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8368d2f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe19c0cc0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe19c0cc0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f20 [0238.378] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html.masked"), dwFlags=0x2) returned 1 [0238.394] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js.masked"), dwFlags=0x2) returned 1 [0238.447] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js.masked"), dwFlags=0x2) returned 1 [0238.454] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css.masked"), dwFlags=0x2) returned 1 [0238.474] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html.masked"), dwFlags=0x2) returned 1 [0238.497] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js.masked"), dwFlags=0x2) returned 1 [0238.881] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css.masked"), dwFlags=0x2) returned 1 [0238.921] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js.masked"), dwFlags=0x2) returned 1 [0239.102] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js.masked"), dwFlags=0x2) returned 1 [0239.745] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js.masked"), dwFlags=0x2) returned 1 [0239.751] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js.masked"), dwFlags=0x2) returned 1 [0239.756] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\*", lpFindFileData=0x387d64 | out: lpFindFileData=0x387d64*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833e6790, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe26fe720, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe26fe720, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f20 [0239.760] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833e8ea0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe26fe720, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe26fe720, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0239.764] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833f7900, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe26fe720, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe26fe720, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0239.769] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83403c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe26fe720, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe26fe720, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0239.779] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8340b180, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe2724880, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe2724880, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0239.820] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8340ffa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe2796ca0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe2796ca0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0239.914] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83419be0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe287b4e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe287b4e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0239.961] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83425f30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe28ed900, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe28ed900, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0240.054] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8342d460, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe29d2140, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe29d2140, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0240.101] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83434990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe2a44560, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe2a44560, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0240.194] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8343bec0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe2b28da0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe2b28da0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0240.241] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8344a920, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe2b9b1c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe2b9b1c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0240.297] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83451e50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe2c0d5e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe2c0d5e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0240.336] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83459380, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe2c7fa00, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe2c7fa00, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0240.429] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834608b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe2d64240, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe2d64240, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0240.615] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83467de0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe2f2d2c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe2f2d2c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0240.709] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83476840, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe3011b00, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe3011b00, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0240.771] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8347dd70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe30aa080, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe30aa080, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0240.865] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834852a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe318e8c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe318e8c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0240.912] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8348c7d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe3200ce0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe3200ce0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0240.958] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83496410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe3273100, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe3273100, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0240.963] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834a2760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe3273100, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe3273100, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0240.993] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834a7580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe32bf3c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe32bf3c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0241.046] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834aeab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe33317e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe33317e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0241.056] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834b86f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe3357940, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe3357940, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0241.064] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834c4a40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe3357940, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe3357940, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0241.071] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834cbf70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe337daa0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe337daa0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0241.077] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834d34a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe337daa0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe337daa0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0241.084] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834da9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe33a3c00, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe33a3c00, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0241.089] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834e9430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe33a3c00, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe33a3c00, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0241.096] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834f0960, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe33a3c00, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe33a3c00, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0241.103] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834fccb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe33c9d60, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe33c9d60, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0241.112] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835041e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe33c9d60, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe33c9d60, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0241.119] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835794e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe33efec0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe33efec0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0241.139] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83580a10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe3416020, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe3416020, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0241.147] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8358f470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe343c180, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe343c180, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0241.172] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_BR\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835969a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe34622e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe34622e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0241.178] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_PT\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835990b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe3488440, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe3488440, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0241.198] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835aa220, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe34ae5a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe34ae5a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0241.203] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835b6570, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe34ae5a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe34ae5a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0241.232] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835c01b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe34fa860, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe34fa860, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0241.241] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835c4fd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe35209c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe35209c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0241.246] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835cec10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe35209c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe35209c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0241.261] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835daf60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe3546b20, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe3546b20, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0241.269] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835dd670, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe3546b20, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe3546b20, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0241.279] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835e4ba0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe356cc80, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe356cc80, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0241.290] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835ec0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe3592de0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe3592de0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0241.315] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835f5d10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe35b8f40, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe35b8f40, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0241.400] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835fd240, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe369d780, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe369d780, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0241.405] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8360bca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe369d780, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe369d780, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0241.418] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x836158e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe36c38e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe36c38e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0241.467] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8361ce10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe3735d00, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe3735d00, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0241.486] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_TW\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83624340, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe375be60, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe375be60, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0241.503] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\*", lpFindFileData=0x387d64 | out: lpFindFileData=0x387d64*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x836ddc00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe37a8120, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe37a8120, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f20 [0241.518] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\*", lpFindFileData=0x389990 | out: lpFindFileData=0x389990*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x96ec4eb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe37a8120, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe37a8120, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e60 [0241.519] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\A058.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticons\\a058.tmp"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\A058.tmp.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticons\\a058.tmp.masked"), dwFlags=0x2) returned 1 [0241.521] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\A059.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticons\\a059.tmp"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\A059.tmp.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticons\\a059.tmp.masked"), dwFlags=0x2) returned 1 [0241.528] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld\\*", lpFindFileData=0x389990 | out: lpFindFileData=0x389990*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85096390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe37ce280, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe37ce280, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e60 [0241.536] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld\\2B03.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticonsold\\2b03.tmp"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld\\2B03.tmp.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticonsold\\2b03.tmp.masked"), dwFlags=0x2) returned 1 [0241.537] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld\\2B04.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticonsold\\2b04.tmp"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld\\2B04.tmp.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticonsold\\2b04.tmp.masked"), dwFlags=0x2) returned 1 [0241.543] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\*", lpFindFileData=0x389990 | out: lpFindFileData=0x389990*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8642cdf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe37f43e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe37f43e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e60 [0241.547] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\*", lpFindFileData=0x38902c | out: lpFindFileData=0x38902c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8642cdf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe37f43e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe37f43e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555ea0 [0241.547] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\000003.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\000003.log"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\000003.log.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\000003.log.masked"), dwFlags=0x2) returned 1 [0241.571] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\*", lpFindFileData=0x389990 | out: lpFindFileData=0x389990*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83ede170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe38406a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe38406a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e60 [0241.592] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\previews_opt_out.db"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\previews_opt_out.db.masked"), dwFlags=0x2) returned 1 [0241.605] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\*", lpFindFileData=0x389990 | out: lpFindFileData=0x389990*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84251e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe388c960, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe388c960, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e60 [0241.614] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\*", lpFindFileData=0x38902c | out: lpFindFileData=0x38902c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84251e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe38b2ac0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe38b2ac0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555ea0 [0241.619] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\000003.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\000003.log"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\000003.log.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\000003.log.masked"), dwFlags=0x2) returned 1 [0243.137] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\*", lpFindFileData=0x389990 | out: lpFindFileData=0x389990*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x868593b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe4721020, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe4721020, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e60 [0243.149] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\*", lpFindFileData=0x38902c | out: lpFindFileData=0x38902c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x868593b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe4747180, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe4747180, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555ea0 [0243.152] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist\\*", lpFindFileData=0x38a2f4 | out: lpFindFileData=0x38a2f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe4747180, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe4747180, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e20 [0243.156] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies\\*", lpFindFileData=0x38a2f4 | out: lpFindFileData=0x38a2f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe4747180, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe4747180, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e20 [0243.158] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials\\*", lpFindFileData=0x38a2f4 | out: lpFindFileData=0x38a2f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe476d2e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe476d2e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e20 [0243.161] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash\\*", lpFindFileData=0x38a2f4 | out: lpFindFileData=0x38a2f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe476d2e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe476d2e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e20 [0243.163] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl\\*", lpFindFileData=0x38a2f4 | out: lpFindFileData=0x38a2f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e47510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe476d2e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe476d2e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e20 [0243.171] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant\\*", lpFindFileData=0x38a2f4 | out: lpFindFileData=0x38a2f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe476d2e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe476d2e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e20 [0243.173] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter\\*", lpFindFileData=0x38a2f4 | out: lpFindFileData=0x38a2f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe4793440, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe4793440, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e20 [0243.176] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm\\*", lpFindFileData=0x38a2f4 | out: lpFindFileData=0x38a2f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe4793440, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe4793440, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e20 [0243.178] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\CrashReports\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b0b7d20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe4793440, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe4793440, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0243.201] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\History\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b0b7d20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6b0b7d20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6b0b7d20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x38bda8, dwReserved1=0x77163c74, cFileName="CrashReports", cAlternateFileName="CRASHR~1")) returned 0xffffffff [0243.718] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\IconCache.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\iconcache.db"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\IconCache.db.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\iconcache.db.masked"), dwFlags=0x2) returned 1 [0243.723] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xe4cc8460, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe4cc8460, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0243.726] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Credentials\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xe4cc8460, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe4cc8460, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0243.730] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Event Viewer\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x32121370, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0xe4cc8460, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe4cc8460, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0243.735] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xe4cee5c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe4cee5c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0243.739] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xe4cee5c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe4cee5c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0243.742] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xe4cee5c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe4cee5c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0243.746] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\*", lpFindFileData=0x38a2f4 | out: lpFindFileData=0x38a2f4*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xe4cee5c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe4cee5c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e20 [0243.750] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xe4d14720, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe4d14720, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0243.757] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xe4d14720, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe4d14720, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0243.761] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xe4d14720, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe4d14720, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0243.764] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xe4d14720, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe4d14720, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0243.798] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\index.dat"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\index.dat.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\index.dat.masked"), dwFlags=0x2) returned 1 [0243.804] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xe4d86b40, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe4d86b40, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0243.807] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\FORMS\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3d1d6940, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0xe4d86b40, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe4d86b40, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0244.171] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\FORMS\\FRMCACHE.DAT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\forms\\frmcache.dat"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\FORMS\\FRMCACHE.DAT.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\forms\\frmcache.dat.masked"), dwFlags=0x2) returned 1 [0244.177] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IME12\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd754c00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe5118c40, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe5118c40, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0244.181] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP12\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe5118c40, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe5118c40, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0244.185] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP8_1\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe5118c40, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe5118c40, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0244.189] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP9_0\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe513eda0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe513eda0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0244.194] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xe513eda0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe513eda0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0244.209] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.bak" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\brndlog.bak"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.bak.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\brndlog.bak.masked"), dwFlags=0x2) returned 1 [0244.336] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\brndlog.txt"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\brndlog.txt.masked"), dwFlags=0x2) returned 1 [0244.360] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0xe52e1cc0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe52e1cc0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0244.362] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\3LKBQZJ3\\*", lpFindFileData=0x38a2f4 | out: lpFindFileData=0x38a2f4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0xe52e1cc0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe52e1cc0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e20 [0244.366] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33\\*", lpFindFileData=0x38a2f4 | out: lpFindFileData=0x38a2f4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0xe52e1cc0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe52e1cc0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e20 [0244.367] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33\\get.adobe[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\8nes5h33\\get.adobe[1].xml"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33\\get.adobe[1].xml.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\8nes5h33\\get.adobe[1].xml.masked"), dwFlags=0x2) returned 1 [0244.374] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\FKLUIDU0\\*", lpFindFileData=0x38a2f4 | out: lpFindFileData=0x38a2f4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0xe52e1cc0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe52e1cc0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e20 [0244.407] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\index.dat"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\index.dat.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\index.dat.masked"), dwFlags=0x2) returned 1 [0244.412] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\OWLVMZRC\\*", lpFindFileData=0x38a2f4 | out: lpFindFileData=0x38a2f4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0xe53540e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe53540e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e20 [0244.424] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\frameiconcache.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\frameiconcache.dat"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\frameiconcache.dat.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\frameiconcache.dat.masked"), dwFlags=0x2) returned 1 [0244.444] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\MSIMGSIZ.DAT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\msimgsiz.dat"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\MSIMGSIZ.DAT.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\msimgsiz.dat.masked"), dwFlags=0x2) returned 1 [0244.451] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4ed4ae10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe53a03a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe53a03a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0244.453] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active\\*", lpFindFileData=0x38a2f4 | out: lpFindFileData=0x38a2f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4ed70f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe53c6500, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe53c6500, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e20 [0244.457] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\*", lpFindFileData=0x38a2f4 | out: lpFindFileData=0x38a2f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6db5fbe0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe53c6500, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe53c6500, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e20 [0244.463] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\RecoveryStore.{4BD650F1-C8F9-11E7-B5BF-C43DC7584A00}.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\recoverystore.{4bd650f1-c8f9-11e7-b5bf-c43dc7584a00}.dat"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\RecoveryStore.{4BD650F1-C8F9-11E7-B5BF-C43DC7584A00}.dat.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\recoverystore.{4bd650f1-c8f9-11e7-b5bf-c43dc7584a00}.dat.masked"), dwFlags=0x2) returned 1 [0244.471] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\RecoveryStore.{AAE6BF5C-4991-11E7-8E2B-C43DC7584A00}.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\recoverystore.{aae6bf5c-4991-11e7-8e2b-c43dc7584a00}.dat"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\RecoveryStore.{AAE6BF5C-4991-11E7-8E2B-C43DC7584A00}.dat.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\recoverystore.{aae6bf5c-4991-11e7-8e2b-c43dc7584a00}.dat.masked"), dwFlags=0x2) returned 1 [0244.713] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\{4BD650F0-C8F9-11E7-B5BF-C43DC7584A00}.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\{4bd650f0-c8f9-11e7-b5bf-c43dc7584a00}.dat"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\{4BD650F0-C8F9-11E7-B5BF-C43DC7584A00}.dat.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\{4bd650f0-c8f9-11e7-b5bf-c43dc7584a00}.dat.masked"), dwFlags=0x2) returned 1 [0244.876] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\{69512155-C8F9-11E7-B5BF-C43DC7584A00}.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\{69512155-c8f9-11e7-b5bf-c43dc7584a00}.dat"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\{69512155-C8F9-11E7-B5BF-C43DC7584A00}.dat.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\{69512155-c8f9-11e7-b5bf-c43dc7584a00}.dat.masked"), dwFlags=0x2) returned 1 [0244.881] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xe57caa20, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe57caa20, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0244.886] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xe57caa20, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe57caa20, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0244.890] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\*", lpFindFileData=0x38a2f4 | out: lpFindFileData=0x38a2f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xe57f0b80, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe57f0b80, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e20 [0244.894] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\*", lpFindFileData=0x389990 | out: lpFindFileData=0x389990*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xe57f0b80, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe57f0b80, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e60 [0244.898] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\*", lpFindFileData=0x389990 | out: lpFindFileData=0x389990*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xe57f0b80, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe57f0b80, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e60 [0245.004] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Transcoded Files Cache\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf7f22040, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xe58fb520, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe58fb520, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0245.015] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0xe5921680, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe5921680, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0245.044] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x197ec0b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xe59477e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe59477e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0245.084] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\OfficeFileCache\\*", lpFindFileData=0x38a2f4 | out: lpFindFileData=0x38a2f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf7a855a0, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xe59b9c00, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe59b9c00, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e20 [0245.091] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0xe59dfd60, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe59dfd60, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0245.094] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\System\\*", lpFindFileData=0x38a2f4 | out: lpFindFileData=0x38a2f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0xe59dfd60, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe59dfd60, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e20 [0245.096] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\User\\*", lpFindFileData=0x38a2f4 | out: lpFindFileData=0x38a2f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0xe59dfd60, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe59dfd60, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e20 [0245.364] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4bb72310, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xe5c674c0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe5c674c0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0245.451] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\350db95df4cbd94b2a1c300510e12e11.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\onetconfig\\350db95df4cbd94b2a1c300510e12e11.xml"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\350db95df4cbd94b2a1c300510e12e11.xml.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\onetconfig\\350db95df4cbd94b2a1c300510e12e11.xml.masked"), dwFlags=0x2) returned 1 [0245.497] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3dc40980, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0xe5d97fc0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe5d97fc0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0245.774] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x609dab00, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0xe6045880, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe6045880, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0245.775] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\Stream_ContactPrefs_2_F230E11936B7D740A008FFC660E83C71.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\outlook\\roamcache\\stream_contactprefs_2_f230e11936b7d740a008ffc660e83c71.dat"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\Stream_ContactPrefs_2_F230E11936B7D740A008FFC660E83C71.dat.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\outlook\\roamcache\\stream_contactprefs_2_f230e11936b7d740a008ffc660e83c71.dat.masked"), dwFlags=0x2) returned 1 [0245.818] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Publisher\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4bb4c1b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xe60b7ca0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe60b7ca0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0245.825] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\TaskSchedulerConfig\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3abef650, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0xe60dde00, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe60dde00, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0245.829] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Visio\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x962f4540, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0xe60dde00, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe60dde00, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0246.122] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Visio\\content14.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\visio\\content14.dat"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Visio\\content14.dat.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\visio\\content14.dat.masked"), dwFlags=0x2) returned 1 [0246.264] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Visio\\thumbs.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\visio\\thumbs.dat"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Visio\\thumbs.dat.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\visio\\thumbs.dat.masked"), dwFlags=0x2) returned 1 [0246.269] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xe6508480, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe6508480, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0246.273] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\1024\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x666948e0, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0xe6508480, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe6508480, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0246.286] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\1033\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x34d50a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe652e5e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe652e5e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0246.657] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\1033\\StructuredQuerySchema.bin" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\1033\\structuredqueryschema.bin"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\1033\\StructuredQuerySchema.bin.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\1033\\structuredqueryschema.bin.masked"), dwFlags=0x2) returned 1 [0246.663] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Burn\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xe68c06e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe68c06e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0246.668] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn\\*", lpFindFileData=0x38a2f4 | out: lpFindFileData=0x38a2f4*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xe68c06e0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe68c06e0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e20 [0246.672] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn1\\*", lpFindFileData=0x38a2f4 | out: lpFindFileData=0x38a2f4*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x3b9ee2a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe68e6840, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe68e6840, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e20 [0246.683] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn2\\*", lpFindFileData=0x38a2f4 | out: lpFindFileData=0x38a2f4*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x926116d0, ftCreationTime.dwHighDateTime=0x1d30596, ftLastAccessTime.dwLowDateTime=0xe690c9a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe690c9a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e20 [0246.686] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Caches\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xe690c9a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe690c9a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0246.703] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.1.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\caches\\cversions.1.db"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.1.db.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\caches\\cversions.1.db.masked"), dwFlags=0x2) returned 1 [0246.707] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3978EA0A-1C7E-4449-8AE1-E1265F039002}.1.ver0x0000000000000001.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\caches\\{3978ea0a-1c7e-4449-8ae1-e1265f039002}.1.ver0x0000000000000001.db"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3978EA0A-1C7E-4449-8AE1-E1265F039002}.1.ver0x0000000000000001.db.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\caches\\{3978ea0a-1c7e-4449-8ae1-e1265f039002}.1.ver0x0000000000000001.db.masked"), dwFlags=0x2) returned 1 [0246.712] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Caches\\{40FC8D7D-05ED-4FEB-B03B-6C100659EF5C}.1.ver0x0000000000000001.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\caches\\{40fc8d7d-05ed-4feb-b03b-6c100659ef5c}.1.ver0x0000000000000001.db"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Caches\\{40FC8D7D-05ED-4FEB-B03B-6C100659EF5C}.1.ver0x0000000000000001.db.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\caches\\{40fc8d7d-05ed-4feb-b03b-6c100659ef5c}.1.ver0x0000000000000001.db.masked"), dwFlags=0x2) returned 1 [0246.886] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Caches\\{4E36EA69-73D1-4458-9D16-50F8E31A69A0}.1.ver0x0000000000000001.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\caches\\{4e36ea69-73d1-4458-9d16-50f8e31a69a0}.1.ver0x0000000000000001.db"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Caches\\{4E36EA69-73D1-4458-9D16-50F8E31A69A0}.1.ver0x0000000000000001.db.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\caches\\{4e36ea69-73d1-4458-9d16-50f8e31a69a0}.1.ver0x0000000000000001.db.masked"), dwFlags=0x2) returned 1 [0247.096] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Caches\\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.1.ver0x0000000000000001.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\caches\\{6af0698e-d558-4f6e-9b3c-3716689af493}.1.ver0x0000000000000001.db"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Caches\\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.1.ver0x0000000000000001.db.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\caches\\{6af0698e-d558-4f6e-9b3c-3716689af493}.1.ver0x0000000000000001.db.masked"), dwFlags=0x2) returned 1 [0247.208] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000015.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x0000000000000015.db"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000015.db.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x0000000000000015.db.masked"), dwFlags=0x2) returned 1 [0247.351] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000016.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x0000000000000016.db"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000016.db.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x0000000000000016.db.masked"), dwFlags=0x2) returned 1 [0247.822] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Caches\\{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.1.ver0x0000000000000001.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\caches\\{ddf571f2-be98-426d-8288-1a9a39c3fda2}.1.ver0x0000000000000001.db"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Caches\\{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.1.ver0x0000000000000001.db.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\caches\\{ddf571f2-be98-426d-8288-1a9a39c3fda2}.1.ver0x0000000000000001.db.masked"), dwFlags=0x2) returned 1 [0247.827] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Explorer\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xe73c9230, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe73c9230, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0247.828] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_1024.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_1024.db"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_1024.db.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_1024.db.masked"), dwFlags=0x2) returned 1 [0248.359] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_256.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_256.db"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_256.db.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_256.db.masked"), dwFlags=0x2) returned 1 [0248.366] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_32.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_32.db"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_32.db.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_32.db.masked"), dwFlags=0x2) returned 1 [0249.106] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_96.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_96.db"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_96.db.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_96.db.masked"), dwFlags=0x2) returned 1 [0249.112] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_idx.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_idx.db"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_idx.db.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_idx.db.masked"), dwFlags=0x2) returned 1 [0249.114] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_sr.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_sr.db"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_sr.db.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_sr.db.masked"), dwFlags=0x2) returned 1 [0249.120] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\GameExplorer\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xe7fbac10, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe7fbac10, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0249.124] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xe47b95a0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe47b95a0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0249.127] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\*", lpFindFileData=0x38a2f4 | out: lpFindFileData=0x38a2f4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xe7fbac10, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe7fbac10, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e20 [0249.191] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\index.dat"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\index.dat.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\index.dat.masked"), dwFlags=0x2) returned 1 [0249.202] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012019102220191023\\*", lpFindFileData=0x389990 | out: lpFindFileData=0x389990*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5a467b20, ftCreationTime.dwHighDateTime=0x1d5882d, ftLastAccessTime.dwLowDateTime=0xe80792f0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe80792f0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e60 [0249.266] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012019102220191023\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\mshist012019102220191023\\index.dat"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012019102220191023\\index.dat.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\mshist012019102220191023\\index.dat.masked"), dwFlags=0x2) returned 1 [0249.272] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\*", lpFindFileData=0x38a2f4 | out: lpFindFileData=0x38a2f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xe8111870, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe8111870, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e20 [0249.277] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\*", lpFindFileData=0x389990 | out: lpFindFileData=0x389990*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4f090c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe81379d0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe81379d0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e60 [0249.309] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\history\\low\\history.ie5\\index.dat"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\index.dat.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\history\\low\\history.ie5\\index.dat.masked"), dwFlags=0x2) returned 1 [0249.315] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017071220170713\\*", lpFindFileData=0x38902c | out: lpFindFileData=0x38902c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x45c34df0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0xe8183c90, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe8183c90, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555ea0 [0249.348] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017071220170713\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\history\\low\\history.ie5\\mshist012017071220170713\\index.dat"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017071220170713\\index.dat.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\history\\low\\history.ie5\\mshist012017071220170713\\index.dat.masked"), dwFlags=0x2) returned 1 [0249.368] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Ringtones\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xe821c210, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe821c210, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0249.373] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xe821c210, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe821c210, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0249.376] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\*", lpFindFileData=0x38a2f4 | out: lpFindFileData=0x38a2f4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xe821c210, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe821c210, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e20 [0249.444] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\index.dat"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\index.dat.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\index.dat.masked"), dwFlags=0x2) returned 1 [0249.452] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\MM5O9XQS\\*", lpFindFileData=0x389990 | out: lpFindFileData=0x389990*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xe82da8f0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe82da8f0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e60 [0249.456] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PMMR5K9K\\*", lpFindFileData=0x389990 | out: lpFindFileData=0x389990*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xe82da8f0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe82da8f0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e60 [0249.460] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\RIJUQL1C\\*", lpFindFileData=0x389990 | out: lpFindFileData=0x389990*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xe8300a50, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe8300a50, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e60 [0249.464] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\X9OHK109\\*", lpFindFileData=0x389990 | out: lpFindFileData=0x389990*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xe8300a50, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe8300a50, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e60 [0249.467] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.MSO\\*", lpFindFileData=0x38a2f4 | out: lpFindFileData=0x38a2f4*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x2dbf3370, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xe8300a50, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe8300a50, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e20 [0249.470] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.Word\\*", lpFindFileData=0x38a2f4 | out: lpFindFileData=0x38a2f4*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xe7138400, ftCreationTime.dwHighDateTime=0x1d2e625, ftLastAccessTime.dwLowDateTime=0xe8300a50, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe8300a50, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e20 [0249.475] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\*", lpFindFileData=0x38a2f4 | out: lpFindFileData=0x38a2f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xe8300a50, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe8300a50, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e20 [0249.479] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\AntiPhishing\\*", lpFindFileData=0x389990 | out: lpFindFileData=0x389990*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50f10630, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe8326bb0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe8326bb0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e60 [0250.153] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\AntiPhishing\\2CEDBFBC-DBA8-43AA-B1FD-CC8E6316E3E2.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\antiphishing\\2cedbfbc-dba8-43aa-b1fd-cc8e6316e3e2.dat"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\AntiPhishing\\2CEDBFBC-DBA8-43AA-B1FD-CC8E6316E3E2.dat.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\antiphishing\\2cedbfbc-dba8-43aa-b1fd-cc8e6316e3e2.dat.masked"), dwFlags=0x2) returned 1 [0250.159] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\*", lpFindFileData=0x389990 | out: lpFindFileData=0x389990*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4f090c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe898c6d0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe898c6d0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e60 [0250.165] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\*", lpFindFileData=0x38902c | out: lpFindFileData=0x38902c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4f090c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe89b2830, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xe89b2830, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555ea0 [0250.205] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\528d82a2[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\528d82a2[1].js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\528d82a2[1].js.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\528d82a2[1].js.masked"), dwFlags=0x2) returned 1 [0250.209] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA3e3XC[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa3e3xc[2].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA3e3XC[2].png.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa3e3xc[2].png.masked"), dwFlags=0x2) returned 1 [0250.240] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA3vOVA[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa3vova[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA3vOVA[1].png.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa3vova[1].png.masked"), dwFlags=0x2) returned 1 [0250.245] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA42EP9[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa42ep9[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA42EP9[1].png.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa42ep9[1].png.masked"), dwFlags=0x2) returned 1 [0250.249] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA54rQj[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa54rqj[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA54rQj[1].png.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa54rqj[1].png.masked"), dwFlags=0x2) returned 1 [0250.255] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA61yi9[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa61yi9[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA61yi9[1].png.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa61yi9[1].png.masked"), dwFlags=0x2) returned 1 [0250.260] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA8uCo4[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa8uco4[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA8uCo4[1].png.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa8uco4[1].png.masked"), dwFlags=0x2) returned 1 [0250.265] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AAdAVrM[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aadavrm[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AAdAVrM[1].png.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aadavrm[1].png.masked"), dwFlags=0x2) returned 1 [0250.269] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\advertisement.ad[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\advertisement.ad[1].js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\advertisement.ad[1].js.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\advertisement.ad[1].js.masked"), dwFlags=0x2) returned 1 [0250.288] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB1CcOi[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb1ccoi[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB1CcOi[1].png.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb1ccoi[1].png.masked"), dwFlags=0x2) returned 1 [0250.304] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB46JmN[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb46jmn[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB46JmN[1].png.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb46jmn[1].png.masked"), dwFlags=0x2) returned 1 [0250.320] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB5kJAC[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb5kjac[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB5kJAC[1].png.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb5kjac[1].png.masked"), dwFlags=0x2) returned 1 [0250.325] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB5kTiV[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb5ktiv[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB5kTiV[1].png.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb5ktiv[1].png.masked"), dwFlags=0x2) returned 1 [0250.345] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB6Ma4a[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb6ma4a[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB6Ma4a[1].png.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb6ma4a[1].png.masked"), dwFlags=0x2) returned 1 [0250.365] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB74fLs[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb74fls[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB74fLs[1].png.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb74fls[1].png.masked"), dwFlags=0x2) returned 1 [0250.383] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBIqq8[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbiqq8[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBIqq8[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbiqq8[1].jpg.masked"), dwFlags=0x2) returned 1 [0250.389] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBL0ij[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbl0ij[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBL0ij[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbl0ij[1].jpg.masked"), dwFlags=0x2) returned 1 [0250.395] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBLhZX[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbblhzx[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBLhZX[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbblhzx[1].jpg.masked"), dwFlags=0x2) returned 1 [0250.408] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBNiEo[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbnieo[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBNiEo[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbnieo[1].jpg.masked"), dwFlags=0x2) returned 1 [0250.454] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBO1mQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbo1mq[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBO1mQ[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbo1mq[1].jpg.masked"), dwFlags=0x2) returned 1 [0250.546] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBO3tl[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbo3tl[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBO3tl[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbo3tl[1].jpg.masked"), dwFlags=0x2) returned 1 [0250.552] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBO8dQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbo8dq[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBO8dQ[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbo8dq[1].jpg.masked"), dwFlags=0x2) returned 1 [0250.570] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBOe7C[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbboe7c[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBOe7C[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbboe7c[1].jpg.masked"), dwFlags=0x2) returned 1 [0250.622] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBPThN[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbpthn[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBPThN[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbpthn[1].jpg.masked"), dwFlags=0x2) returned 1 [0250.685] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBPUFJ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbpufj[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBPUFJ[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbpufj[1].jpg.masked"), dwFlags=0x2) returned 1 [0250.694] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBQxzx[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbqxzx[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBQxzx[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbqxzx[1].jpg.masked"), dwFlags=0x2) returned 1 [0250.736] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBseMP[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbsemp[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBseMP[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbsemp[1].jpg.masked"), dwFlags=0x2) returned 1 [0250.776] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBsqNL[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbsqnl[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBsqNL[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbsqnl[1].jpg.masked"), dwFlags=0x2) returned 1 [0250.782] GetFileType (hFile=0x88) returned 0x1 [0250.786] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBTpvW[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbtpvw[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBTpvW[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbtpvw[1].jpg.masked"), dwFlags=0x2) returned 1 [0250.787] GetFileType (hFile=0x88) returned 0x1 [0250.812] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVEOW[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbveow[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVEOW[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbveow[1].jpg.masked"), dwFlags=0x2) returned 1 [0250.820] GetFileType (hFile=0x88) returned 0x1 [0250.830] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVGsM[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbvgsm[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVGsM[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbvgsm[1].jpg.masked"), dwFlags=0x2) returned 1 [0250.870] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVIzI[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbvizi[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVIzI[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbvizi[1].jpg.masked"), dwFlags=0x2) returned 1 [0250.910] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVJ4r[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbvj4r[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVJ4r[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbvj4r[1].jpg.masked"), dwFlags=0x2) returned 1 [0250.947] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVxM8[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbvxm8[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVxM8[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbvxm8[1].jpg.masked"), dwFlags=0x2) returned 1 [0250.953] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBz9wz[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbz9wz[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBz9wz[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbz9wz[1].jpg.masked"), dwFlags=0x2) returned 1 [0251.059] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBzxW1[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbzxw1[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBzxW1[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbzxw1[1].jpg.masked"), dwFlags=0x2) returned 1 [0251.218] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC06Ub[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc06ub[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC06Ub[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc06ub[1].jpg.masked"), dwFlags=0x2) returned 1 [0251.272] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC095c[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc095c[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC095c[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc095c[1].jpg.masked"), dwFlags=0x2) returned 1 [0251.283] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0ALC[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0alc[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0ALC[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0alc[1].jpg.masked"), dwFlags=0x2) returned 1 [0251.343] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0lYn[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0lyn[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0lYn[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0lyn[1].jpg.masked"), dwFlags=0x2) returned 1 [0251.350] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0mlu[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0mlu[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0mlu[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0mlu[1].jpg.masked"), dwFlags=0x2) returned 1 [0251.360] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0rDa[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0rda[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0rDa[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0rda[1].jpg.masked"), dwFlags=0x2) returned 1 [0251.364] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0rDa[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0rda[2].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0rDa[2].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0rda[2].jpg.masked"), dwFlags=0x2) returned 1 [0251.424] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0tCi[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0tci[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0tCi[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0tci[1].jpg.masked"), dwFlags=0x2) returned 1 [0251.438] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBDK7Yy[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbdk7yy[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBDK7Yy[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbdk7yy[1].jpg.masked"), dwFlags=0x2) returned 1 [0251.444] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBDRbsH[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbdrbsh[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBDRbsH[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbdrbsh[1].jpg.masked"), dwFlags=0x2) returned 1 [0251.489] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBDZoZR[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbdzozr[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBDZoZR[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbdzozr[1].jpg.masked"), dwFlags=0x2) returned 1 [0251.547] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBE97O8[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbe97o8[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBE97O8[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbe97o8[1].jpg.masked"), dwFlags=0x2) returned 1 [0251.554] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBE9wSt[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbe9wst[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBE9wSt[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbe9wst[1].jpg.masked"), dwFlags=0x2) returned 1 [0251.559] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEcHle[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbechle[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEcHle[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbechle[1].jpg.masked"), dwFlags=0x2) returned 1 [0251.571] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdE0f[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbede0f[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdE0f[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbede0f[1].jpg.masked"), dwFlags=0x2) returned 1 [0251.615] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdoQv[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbedoqv[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdoQv[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbedoqv[1].jpg.masked"), dwFlags=0x2) returned 1 [0251.662] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdqEy[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbedqey[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdqEy[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbedqey[1].jpg.masked"), dwFlags=0x2) returned 1 [0251.683] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdtWw[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbedtww[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdtWw[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbedtww[1].jpg.masked"), dwFlags=0x2) returned 1 [0251.724] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdXJj[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbedxjj[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdXJj[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbedxjj[1].jpg.masked"), dwFlags=0x2) returned 1 [0251.746] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEeP0k[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbeep0k[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEeP0k[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbeep0k[1].jpg.masked"), dwFlags=0x2) returned 1 [0251.763] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEeTuf[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbeetuf[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEeTuf[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbeetuf[1].jpg.masked"), dwFlags=0x2) returned 1 [0251.808] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEfE6e[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbefe6e[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEfE6e[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbefe6e[1].jpg.masked"), dwFlags=0x2) returned 1 [0251.874] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEfjuT[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbefjut[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEfjuT[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbefjut[1].jpg.masked"), dwFlags=0x2) returned 1 [0251.888] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEg9QV[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbeg9qv[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEg9QV[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbeg9qv[1].jpg.masked"), dwFlags=0x2) returned 1 [0251.939] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgGSl[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbeggsl[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgGSl[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbeggsl[1].jpg.masked"), dwFlags=0x2) returned 1 [0251.952] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgiYw[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegiyw[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgiYw[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegiyw[1].jpg.masked"), dwFlags=0x2) returned 1 [0251.966] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgJfz[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegjfz[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgJfz[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegjfz[1].jpg.masked"), dwFlags=0x2) returned 1 [0251.972] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgqtY[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegqty[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgqtY[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegqty[1].jpg.masked"), dwFlags=0x2) returned 1 [0252.029] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgsz3[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegsz3[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgsz3[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegsz3[1].jpg.masked"), dwFlags=0x2) returned 1 [0252.040] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgtcS[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegtcs[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgtcS[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegtcs[1].jpg.masked"), dwFlags=0x2) returned 1 [0252.062] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgtcS[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegtcs[2].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgtcS[2].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegtcs[2].jpg.masked"), dwFlags=0x2) returned 1 [0252.071] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgx5f[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegx5f[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgx5f[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegx5f[1].jpg.masked"), dwFlags=0x2) returned 1 [0252.076] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgx5f[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegx5f[2].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgx5f[2].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegx5f[2].jpg.masked"), dwFlags=0x2) returned 1 [0252.093] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgyIm[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegyim[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgyIm[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegyim[1].jpg.masked"), dwFlags=0x2) returned 1 [0252.097] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBg3ODX[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbg3odx[2].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBg3ODX[2].png.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbg3odx[2].png.masked"), dwFlags=0x2) returned 1 [0252.103] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBiyCq[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbiycq[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBiyCq[1].png.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbiycq[1].png.masked"), dwFlags=0x2) returned 1 [0252.106] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBn4lUU[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbn4luu[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBn4lUU[1].png.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbn4luu[1].png.masked"), dwFlags=0x2) returned 1 [0252.110] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBnMKeN[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbnmken[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBnMKeN[1].png.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbnmken[1].png.masked"), dwFlags=0x2) returned 1 [0252.127] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBwGan9[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbwgan9[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBwGan9[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbwgan9[1].jpg.masked"), dwFlags=0x2) returned 1 [0252.132] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBz3ebk[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbz3ebk[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBz3ebk[1].png.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbz3ebk[1].png.masked"), dwFlags=0x2) returned 1 [0252.166] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\benefits-5-mobile[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\benefits-5-mobile[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\benefits-5-mobile[1].png.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\benefits-5-mobile[1].png.masked"), dwFlags=0x2) returned 1 [0252.237] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\chrome-new[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\chrome-new[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\chrome-new[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\chrome-new[1].jpg.masked"), dwFlags=0x2) returned 1 [0252.258] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\ContainerTag[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\containertag[1].js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\ContainerTag[1].js.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\containertag[1].js.masked"), dwFlags=0x2) returned 1 [0252.264] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\ContainerTag[2].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\containertag[2].js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\ContainerTag[2].js.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\containertag[2].js.masked"), dwFlags=0x2) returned 1 [0252.267] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\css[2].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\css[2].txt"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\css[2].txt.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\css[2].txt.masked"), dwFlags=0x2) returned 1 [0252.304] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\fallback_728x90[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\fallback_728x90[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\fallback_728x90[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\fallback_728x90[1].jpg.masked"), dwFlags=0x2) returned 1 [0252.309] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\ie8[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\ie8[1].txt"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\ie8[1].txt.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\ie8[1].txt.masked"), dwFlags=0x2) returned 1 [0252.352] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\plusone[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\plusone[1].js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\plusone[1].js.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\plusone[1].js.masked"), dwFlags=0x2) returned 1 [0252.546] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\uhf-west-european-default.min[1].css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\uhf-west-european-default.min[1].css"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\uhf-west-european-default.min[1].css.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\uhf-west-european-default.min[1].css.masked"), dwFlags=0x2) returned 1 [0252.557] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\WebCore.4.19.0.ltr.light.min[1].css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\webcore.4.19.0.ltr.light.min[1].css"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\WebCore.4.19.0.ltr.light.min[1].css.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\webcore.4.19.0.ltr.light.min[1].css.masked"), dwFlags=0x2) returned 1 [0252.563] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\*", lpFindFileData=0x38902c | out: lpFindFileData=0x38902c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4f090c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xea075a90, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xea075a90, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555ea0 [0252.628] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\000000929096[1].gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\000000929096[1].gif"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\000000929096[1].gif.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\000000929096[1].gif.masked"), dwFlags=0x2) returned 1 [0252.652] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\1223855322-postmessagerelay[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\1223855322-postmessagerelay[1].js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\1223855322-postmessagerelay[1].js.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\1223855322-postmessagerelay[1].js.masked"), dwFlags=0x2) returned 1 [0252.656] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA3e1oO[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa3e1oo[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA3e1oO[1].png.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa3e1oo[1].png.masked"), dwFlags=0x2) returned 1 [0252.660] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA429NP[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa429np[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA429NP[1].png.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa429np[1].png.masked"), dwFlags=0x2) returned 1 [0252.664] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA42pjY[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa42pjy[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA42pjY[1].png.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa42pjy[1].png.masked"), dwFlags=0x2) returned 1 [0252.667] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA61AKN[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa61akn[2].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA61AKN[2].png.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa61akn[2].png.masked"), dwFlags=0x2) returned 1 [0252.680] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA6KizP[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa6kizp[2].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA6KizP[2].png.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa6kizp[2].png.masked"), dwFlags=0x2) returned 1 [0252.685] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA7XCQ3[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa7xcq3[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA7XCQ3[1].png.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa7xcq3[1].png.masked"), dwFlags=0x2) returned 1 [0252.689] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA8Tave[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa8tave[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA8Tave[1].png.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa8tave[1].png.masked"), dwFlags=0x2) returned 1 [0252.692] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AAfOIDq[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aafoidq[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AAfOIDq[1].png.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aafoidq[1].png.masked"), dwFlags=0x2) returned 1 [0252.695] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AAkhMz9[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aakhmz9[2].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AAkhMz9[2].png.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aakhmz9[2].png.masked"), dwFlags=0x2) returned 1 [0252.699] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AAmRY2Q[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aamry2q[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AAmRY2Q[1].png.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aamry2q[1].png.masked"), dwFlags=0x2) returned 1 [0252.702] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AAni8qk[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aani8qk[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AAni8qk[1].png.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aani8qk[1].png.masked"), dwFlags=0x2) returned 1 [0252.737] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\adition[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\adition[1].js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\adition[1].js.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\adition[1].js.masked"), dwFlags=0x2) returned 1 [0252.886] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\b367c075-d98a-457d-b37d-3d9e8ab53e8b[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\b367c075-d98a-457d-b37d-3d9e8ab53e8b[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\b367c075-d98a-457d-b37d-3d9e8ab53e8b[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\b367c075-d98a-457d-b37d-3d9e8ab53e8b[1].jpg.masked"), dwFlags=0x2) returned 1 [0252.890] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BB8jcOr[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bb8jcor[2].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BB8jcOr[2].png.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bb8jcor[2].png.masked"), dwFlags=0x2) returned 1 [0252.903] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBB8ZbM[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbb8zbm[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBB8ZbM[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbb8zbm[1].jpg.masked"), dwFlags=0x2) returned 1 [0252.907] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBB9wH0[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbb9wh0[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBB9wH0[1].png.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbb9wh0[1].png.masked"), dwFlags=0x2) returned 1 [0252.921] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBCFjo[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbcfjo[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBCFjo[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbcfjo[1].jpg.masked"), dwFlags=0x2) returned 1 [0252.935] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBDtcM[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbdtcm[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBDtcM[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbdtcm[1].jpg.masked"), dwFlags=0x2) returned 1 [0252.947] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBIeNJ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbienj[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBIeNJ[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbienj[1].jpg.masked"), dwFlags=0x2) returned 1 [0252.951] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBImKX[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbimkx[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBImKX[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbimkx[1].jpg.masked"), dwFlags=0x2) returned 1 [0252.964] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBL4R9[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbl4r9[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBL4R9[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbl4r9[1].jpg.masked"), dwFlags=0x2) returned 1 [0252.983] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBLhTZ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbblhtz[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBLhTZ[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbblhtz[1].jpg.masked"), dwFlags=0x2) returned 1 [0252.989] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBnhZY[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbnhzy[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBnhZY[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbnhzy[1].jpg.masked"), dwFlags=0x2) returned 1 [0253.012] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBPhAr[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbphar[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBPhAr[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbphar[1].jpg.masked"), dwFlags=0x2) returned 1 [0253.026] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBPiby[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbpiby[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBPiby[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbpiby[1].jpg.masked"), dwFlags=0x2) returned 1 [0253.049] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBPmXJ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbpmxj[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBPmXJ[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbpmxj[1].jpg.masked"), dwFlags=0x2) returned 1 [0253.259] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBPS37[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbps37[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBPS37[1].png.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbps37[1].png.masked"), dwFlags=0x2) returned 1 [0253.279] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBQiBF[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbqibf[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBQiBF[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbqibf[1].jpg.masked"), dwFlags=0x2) returned 1 [0253.285] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBty8h[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbty8h[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBty8h[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbty8h[1].jpg.masked"), dwFlags=0x2) returned 1 [0253.296] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBVACL[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbvacl[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBVACL[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbvacl[1].jpg.masked"), dwFlags=0x2) returned 1 [0253.306] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBVGyR[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbvgyr[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBVGyR[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbvgyr[1].jpg.masked"), dwFlags=0x2) returned 1 [0253.317] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBVMtX[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbvmtx[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBVMtX[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbvmtx[1].jpg.masked"), dwFlags=0x2) returned 1 [0253.331] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBVYsu[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbvysu[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBVYsu[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbvysu[1].jpg.masked"), dwFlags=0x2) returned 1 [0253.336] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBWLtW[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbwltw[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBWLtW[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbwltw[1].jpg.masked"), dwFlags=0x2) returned 1 [0253.341] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBX3xB[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbx3xb[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBX3xB[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbx3xb[1].jpg.masked"), dwFlags=0x2) returned 1 [0253.353] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBY98e[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbby98e[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBY98e[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbby98e[1].jpg.masked"), dwFlags=0x2) returned 1 [0253.360] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBZYVP[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbzyvp[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBZYVP[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbzyvp[1].jpg.masked"), dwFlags=0x2) returned 1 [0253.369] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC04o2[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc04o2[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC04o2[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc04o2[1].jpg.masked"), dwFlags=0x2) returned 1 [0253.382] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC04ok[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc04ok[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC04ok[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc04ok[1].jpg.masked"), dwFlags=0x2) returned 1 [0253.396] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC04we[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc04we[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC04we[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc04we[1].jpg.masked"), dwFlags=0x2) returned 1 [0253.413] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC05rl[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc05rl[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC05rl[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc05rl[1].jpg.masked"), dwFlags=0x2) returned 1 [0253.419] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC05rl[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc05rl[2].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC05rl[2].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc05rl[2].jpg.masked"), dwFlags=0x2) returned 1 [0253.433] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0ATj[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc0atj[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0ATj[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc0atj[1].jpg.masked"), dwFlags=0x2) returned 1 [0253.438] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0D8i[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc0d8i[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0D8i[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc0d8i[1].jpg.masked"), dwFlags=0x2) returned 1 [0253.454] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0g7a[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc0g7a[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0g7a[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc0g7a[1].jpg.masked"), dwFlags=0x2) returned 1 [0253.466] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0w1b[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc0w1b[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0w1b[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc0w1b[1].jpg.masked"), dwFlags=0x2) returned 1 [0253.478] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0xLt[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc0xlt[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0xLt[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc0xlt[1].jpg.masked"), dwFlags=0x2) returned 1 [0253.483] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBDWA22[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbdwa22[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBDWA22[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbdwa22[1].jpg.masked"), dwFlags=0x2) returned 1 [0253.494] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBE7d3b[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbe7d3b[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBE7d3b[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbe7d3b[1].jpg.masked"), dwFlags=0x2) returned 1 [0253.507] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBE85ld[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbe85ld[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBE85ld[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbe85ld[1].jpg.masked"), dwFlags=0x2) returned 1 [0253.515] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEdckp[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbedckp[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEdckp[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbedckp[1].jpg.masked"), dwFlags=0x2) returned 1 [0253.521] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEdMci[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbedmci[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEdMci[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbedmci[1].jpg.masked"), dwFlags=0x2) returned 1 [0253.551] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEdSLV[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbedslv[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEdSLV[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbedslv[1].jpg.masked"), dwFlags=0x2) returned 1 [0253.559] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEe2Pd[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbee2pd[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEe2Pd[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbee2pd[1].jpg.masked"), dwFlags=0x2) returned 1 [0253.578] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEe4Oo[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbee4oo[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEe4Oo[1].png.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbee4oo[1].png.masked"), dwFlags=0x2) returned 1 [0253.585] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEe6Ew[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbee6ew[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEe6Ew[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbee6ew[1].jpg.masked"), dwFlags=0x2) returned 1 [0253.596] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEeFp3[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeefp3[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEeFp3[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeefp3[1].jpg.masked"), dwFlags=0x2) returned 1 [0253.603] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEeGwU[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeegwu[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEeGwU[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeegwu[1].jpg.masked"), dwFlags=0x2) returned 1 [0253.607] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEeUg0[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeeug0[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEeUg0[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeeug0[1].jpg.masked"), dwFlags=0x2) returned 1 [0253.625] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEeZnr[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeeznr[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEeZnr[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeeznr[1].jpg.masked"), dwFlags=0x2) returned 1 [0253.640] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEf5Lq[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbef5lq[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEf5Lq[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbef5lq[1].jpg.masked"), dwFlags=0x2) returned 1 [0253.645] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEfwtU[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbefwtu[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEfwtU[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbefwtu[1].jpg.masked"), dwFlags=0x2) returned 1 [0253.651] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEfzSd[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbefzsd[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEfzSd[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbefzsd[1].jpg.masked"), dwFlags=0x2) returned 1 [0253.660] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgCuQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegcuq[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgCuQ[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegcuq[1].jpg.masked"), dwFlags=0x2) returned 1 [0253.670] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgHzB[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeghzb[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgHzB[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeghzb[1].jpg.masked"), dwFlags=0x2) returned 1 [0253.708] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgIl2[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegil2[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgIl2[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegil2[1].jpg.masked"), dwFlags=0x2) returned 1 [0253.727] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgIl2[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegil2[2].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgIl2[2].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegil2[2].jpg.masked"), dwFlags=0x2) returned 1 [0253.740] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgIyL[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegiyl[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgIyL[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegiyl[1].jpg.masked"), dwFlags=0x2) returned 1 [0253.755] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgkY6[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegky6[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgkY6[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegky6[1].jpg.masked"), dwFlags=0x2) returned 1 [0253.760] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgLzV[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeglzv[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgLzV[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeglzv[1].jpg.masked"), dwFlags=0x2) returned 1 [0253.775] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgUri[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeguri[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgUri[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeguri[1].jpg.masked"), dwFlags=0x2) returned 1 [0253.786] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgXBv[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegxbv[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgXBv[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegxbv[1].jpg.masked"), dwFlags=0x2) returned 1 [0253.791] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgZME[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegzme[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgZME[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegzme[1].jpg.masked"), dwFlags=0x2) returned 1 [0253.794] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBghfVy[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbghfvy[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBghfVy[1].png.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbghfvy[1].png.masked"), dwFlags=0x2) returned 1 [0253.798] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBkwUr[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbkwur[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBkwUr[1].png.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbkwur[1].png.masked"), dwFlags=0x2) returned 1 [0253.801] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBlBV0U[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bblbv0u[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBlBV0U[1].png.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bblbv0u[1].png.masked"), dwFlags=0x2) returned 1 [0253.817] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBzhWWE[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbzhwwe[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBzhWWE[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbzhwwe[1].jpg.masked"), dwFlags=0x2) returned 1 [0253.898] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\benefits-2[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\benefits-2[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\benefits-2[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\benefits-2[1].jpg.masked"), dwFlags=0x2) returned 1 [0253.984] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\benefits-4[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\benefits-4[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\benefits-4[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\benefits-4[1].jpg.masked"), dwFlags=0x2) returned 1 [0254.019] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\bootstrap[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bootstrap[1].js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\bootstrap[1].js.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bootstrap[1].js.masked"), dwFlags=0x2) returned 1 [0254.043] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\bs-jsdep[1].css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bs-jsdep[1].css"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\bs-jsdep[1].css.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bs-jsdep[1].css.masked"), dwFlags=0x2) returned 1 [0254.047] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\collect[1].gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\collect[1].gif"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\collect[1].gif.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\collect[1].gif.masked"), dwFlags=0x2) returned 1 [0254.255] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\core[1].css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\core[1].css"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\core[1].css.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\core[1].css.masked"), dwFlags=0x2) returned 1 [0254.259] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\e151e5[1].gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\e151e5[1].gif"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\e151e5[1].gif.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\e151e5[1].gif.masked"), dwFlags=0x2) returned 1 [0254.615] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\e4-190963-91cdfbc1[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\e4-190963-91cdfbc1[1].txt"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\e4-190963-91cdfbc1[1].txt.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\e4-190963-91cdfbc1[1].txt.masked"), dwFlags=0x2) returned 1 [0254.633] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\f[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\f[1].txt"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\f[1].txt.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\f[1].txt.masked"), dwFlags=0x2) returned 1 [0254.640] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\google_plus_16dp[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\google_plus_16dp[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\google_plus_16dp[1].png.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\google_plus_16dp[1].png.masked"), dwFlags=0x2) returned 1 [0254.643] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\print[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\print[1].txt"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\print[1].txt.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\print[1].txt.masked"), dwFlags=0x2) returned 1 [0254.646] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\tecjslog[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\tecjslog[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\tecjslog[1].png.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\tecjslog[1].png.masked"), dwFlags=0x2) returned 1 [0254.722] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\uhf-main.var.min[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\uhf-main.var.min[1].js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\uhf-main.var.min[1].js.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\uhf-main.var.min[1].js.masked"), dwFlags=0x2) returned 1 [0254.747] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\*", lpFindFileData=0x38902c | out: lpFindFileData=0x38902c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4f090c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xeb549b10, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xeb549b10, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555ea0 [0254.892] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\19619569[1].gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\19619569[1].gif"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\19619569[1].gif.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\19619569[1].gif.masked"), dwFlags=0x2) returned 1 [0255.263] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\7962161087[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\7962161087[1].js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\7962161087[1].js.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\7962161087[1].js.masked"), dwFlags=0x2) returned 1 [0255.267] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA3DGHW[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa3dghw[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA3DGHW[1].png.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa3dghw[1].png.masked"), dwFlags=0x2) returned 1 [0255.271] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA3e1pt[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa3e1pt[2].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA3e1pt[2].png.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa3e1pt[2].png.masked"), dwFlags=0x2) returned 1 [0255.274] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA42ckd[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa42ckd[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA42ckd[1].png.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa42ckd[1].png.masked"), dwFlags=0x2) returned 1 [0255.278] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA42eYr[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa42eyr[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA42eYr[1].png.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa42eyr[1].png.masked"), dwFlags=0x2) returned 1 [0255.281] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA61ILp[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa61ilp[2].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA61ILp[2].png.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa61ilp[2].png.masked"), dwFlags=0x2) returned 1 [0255.285] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA6SNZ6[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa6snz6[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA6SNZ6[1].png.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa6snz6[1].png.masked"), dwFlags=0x2) returned 1 [0255.288] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAbyinC[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aabyinc[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAbyinC[1].png.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aabyinc[1].png.masked"), dwFlags=0x2) returned 1 [0255.306] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAicW5W[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aaicw5w[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAicW5W[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aaicw5w[1].jpg.masked"), dwFlags=0x2) returned 1 [0255.315] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAj0doQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aaj0doq[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAj0doQ[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aaj0doq[1].jpg.masked"), dwFlags=0x2) returned 1 [0255.319] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAkqhIf[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aakqhif[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAkqhIf[1].png.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aakqhif[1].png.masked"), dwFlags=0x2) returned 1 [0255.331] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAmo09p[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aamo09p[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAmo09p[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aamo09p[1].jpg.masked"), dwFlags=0x2) returned 1 [0255.336] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAmUyV2[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aamuyv2[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAmUyV2[1].png.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aamuyv2[1].png.masked"), dwFlags=0x2) returned 1 [0255.339] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAn7gKR[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aan7gkr[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAn7gKR[1].png.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aan7gkr[1].png.masked"), dwFlags=0x2) returned 1 [0255.416] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\ast[2].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\ast[2].js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\ast[2].js.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\ast[2].js.masked"), dwFlags=0x2) returned 1 [0255.423] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BB5zDwX[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bb5zdwx[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BB5zDwX[1].png.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bb5zdwx[1].png.masked"), dwFlags=0x2) returned 1 [0255.427] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBaK3Nm[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbak3nm[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBaK3Nm[1].png.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbak3nm[1].png.masked"), dwFlags=0x2) returned 1 [0255.438] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBLcCz[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbblccz[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBLcCz[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbblccz[1].jpg.masked"), dwFlags=0x2) returned 1 [0255.443] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBLdzQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbldzq[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBLdzQ[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbldzq[1].jpg.masked"), dwFlags=0x2) returned 1 [0255.447] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBO1mQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbo1mq[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBO1mQ[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbo1mq[1].jpg.masked"), dwFlags=0x2) returned 1 [0255.464] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBO1qB[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbo1qb[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBO1qB[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbo1qb[1].jpg.masked"), dwFlags=0x2) returned 1 [0255.475] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBOIAt[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbboiat[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBOIAt[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbboiat[1].jpg.masked"), dwFlags=0x2) returned 1 [0255.481] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBOmuh[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbomuh[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBOmuh[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbomuh[1].jpg.masked"), dwFlags=0x2) returned 1 [0255.486] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBPK5J[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbpk5j[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBPK5J[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbpk5j[1].jpg.masked"), dwFlags=0x2) returned 1 [0255.495] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBPMvJ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbpmvj[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBPMvJ[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbpmvj[1].jpg.masked"), dwFlags=0x2) returned 1 [0255.500] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBUL3E[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbul3e[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBUL3E[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbul3e[1].jpg.masked"), dwFlags=0x2) returned 1 [0255.506] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBUqkT[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbuqkt[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBUqkT[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbuqkt[1].jpg.masked"), dwFlags=0x2) returned 1 [0255.513] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBUqkT[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbuqkt[2].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBUqkT[2].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbuqkt[2].jpg.masked"), dwFlags=0x2) returned 1 [0255.518] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBX3z0[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbx3z0[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBX3z0[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbx3z0[1].jpg.masked"), dwFlags=0x2) returned 1 [0255.538] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBYEW1[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbyew1[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBYEW1[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbyew1[1].jpg.masked"), dwFlags=0x2) returned 1 [0255.547] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBYfEH[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbyfeh[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBYfEH[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbyfeh[1].jpg.masked"), dwFlags=0x2) returned 1 [0255.564] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBZ20W[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbz20w[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBZ20W[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbz20w[1].jpg.masked"), dwFlags=0x2) returned 1 [0255.575] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBzaxY[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbzaxy[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBzaxY[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbzaxy[1].jpg.masked"), dwFlags=0x2) returned 1 [0255.586] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBZzuz[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbzzuz[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBZzuz[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbzzuz[1].jpg.masked"), dwFlags=0x2) returned 1 [0255.603] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC03B1[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc03b1[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC03B1[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc03b1[1].jpg.masked"), dwFlags=0x2) returned 1 [0255.615] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC04o2[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc04o2[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC04o2[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc04o2[1].jpg.masked"), dwFlags=0x2) returned 1 [0255.626] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC06ZQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc06zq[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC06ZQ[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc06zq[1].jpg.masked"), dwFlags=0x2) returned 1 [0255.634] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0ALC[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0alc[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0ALC[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0alc[1].jpg.masked"), dwFlags=0x2) returned 1 [0255.639] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0BiZ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0biz[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0BiZ[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0biz[1].jpg.masked"), dwFlags=0x2) returned 1 [0255.656] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0FXU[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0fxu[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0FXU[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0fxu[1].jpg.masked"), dwFlags=0x2) returned 1 [0255.671] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0FXU[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0fxu[2].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0FXU[2].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0fxu[2].jpg.masked"), dwFlags=0x2) returned 1 [0255.685] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0mkg[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0mkg[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0mkg[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0mkg[1].jpg.masked"), dwFlags=0x2) returned 1 [0255.701] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0mkg[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0mkg[2].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0mkg[2].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0mkg[2].jpg.masked"), dwFlags=0x2) returned 1 [0255.712] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0oQi[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0oqi[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0oQi[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0oqi[1].jpg.masked"), dwFlags=0x2) returned 1 [0255.718] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0tCi[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0tci[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0tCi[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0tci[1].jpg.masked"), dwFlags=0x2) returned 1 [0255.735] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBCM2U2[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbcm2u2[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBCM2U2[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbcm2u2[1].jpg.masked"), dwFlags=0x2) returned 1 [0255.740] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBDGTbx[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbdgtbx[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBDGTbx[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbdgtbx[1].jpg.masked"), dwFlags=0x2) returned 1 [0255.744] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBDk44m[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbdk44m[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBDk44m[1].png.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbdk44m[1].png.masked"), dwFlags=0x2) returned 1 [0255.760] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBDWXoC[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbdwxoc[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBDWXoC[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbdwxoc[1].jpg.masked"), dwFlags=0x2) returned 1 [0255.768] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBE3NcH[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbe3nch[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBE3NcH[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbe3nch[1].jpg.masked"), dwFlags=0x2) returned 1 [0255.772] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBE7GLE[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbe7gle[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBE7GLE[1].png.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbe7gle[1].png.masked"), dwFlags=0x2) returned 1 [0255.797] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBE8aLO[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbe8alo[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBE8aLO[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbe8alo[1].jpg.masked"), dwFlags=0x2) returned 1 [0255.803] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEd5bF[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbed5bf[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEd5bF[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbed5bf[1].jpg.masked"), dwFlags=0x2) returned 1 [0255.872] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEdDNm[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbeddnm[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEdDNm[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbeddnm[1].jpg.masked"), dwFlags=0x2) returned 1 [0255.880] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEdpyr[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbedpyr[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEdpyr[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbedpyr[1].jpg.masked"), dwFlags=0x2) returned 1 [0255.891] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEdQdv[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbedqdv[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEdQdv[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbedqdv[1].jpg.masked"), dwFlags=0x2) returned 1 [0255.897] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEe62t[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbee62t[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEe62t[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbee62t[1].jpg.masked"), dwFlags=0x2) returned 1 [0255.913] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEedPR[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbeedpr[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEedPR[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbeedpr[1].jpg.masked"), dwFlags=0x2) returned 1 [0255.919] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEeTpB[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbeetpb[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEeTpB[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbeetpb[1].jpg.masked"), dwFlags=0x2) returned 1 [0255.925] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEeTuf[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbeetuf[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEeTuf[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbeetuf[1].jpg.masked"), dwFlags=0x2) returned 1 [0255.929] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEeU5U[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbeeu5u[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEeU5U[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbeeu5u[1].jpg.masked"), dwFlags=0x2) returned 1 [0255.934] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEf306[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbef306[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEf306[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbef306[1].jpg.masked"), dwFlags=0x2) returned 1 [0255.940] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEf54R[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbef54r[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEf54R[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbef54r[1].jpg.masked"), dwFlags=0x2) returned 1 [0255.956] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEfBbH[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbefbbh[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEfBbH[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbefbbh[1].jpg.masked"), dwFlags=0x2) returned 1 [0255.967] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEfBq0[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbefbq0[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEfBq0[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbefbq0[1].jpg.masked"), dwFlags=0x2) returned 1 [0255.979] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEfBrz[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbefbrz[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEfBrz[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbefbrz[1].jpg.masked"), dwFlags=0x2) returned 1 [0256.208] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEfXl6[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbefxl6[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEfXl6[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbefxl6[1].jpg.masked"), dwFlags=0x2) returned 1 [0256.219] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEgEH3[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbegeh3[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEgEH3[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbegeh3[1].jpg.masked"), dwFlags=0x2) returned 1 [0256.232] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEgsz3[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbegsz3[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEgsz3[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbegsz3[1].jpg.masked"), dwFlags=0x2) returned 1 [0256.243] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEgTxB[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbegtxb[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEgTxB[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbegtxb[1].jpg.masked"), dwFlags=0x2) returned 1 [0256.255] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBo1lFJ[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbo1lfj[2].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBo1lFJ[2].png.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbo1lfj[2].png.masked"), dwFlags=0x2) returned 1 [0256.268] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBs47TE[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbs47te[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBs47TE[1].png.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbs47te[1].png.masked"), dwFlags=0x2) returned 1 [0256.283] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBu9sWQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbu9swq[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBu9sWQ[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbu9swq[1].jpg.masked"), dwFlags=0x2) returned 1 [0256.303] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BByazif[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbyazif[2].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BByazif[2].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbyazif[2].jpg.masked"), dwFlags=0x2) returned 1 [0256.353] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\bs-components[1].css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bs-components[1].css"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\bs-components[1].css.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bs-components[1].css.masked"), dwFlags=0x2) returned 1 [0256.371] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\bs-util[1].css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bs-util[1].css"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\bs-util[1].css.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bs-util[1].css.masked"), dwFlags=0x2) returned 1 [0256.591] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\c7-bdbd0d-91cdfbc1[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\c7-bdbd0d-91cdfbc1[1].txt"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\c7-bdbd0d-91cdfbc1[1].txt.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\c7-bdbd0d-91cdfbc1[1].txt.masked"), dwFlags=0x2) returned 1 [0257.047] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\chrome.min[1].css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\chrome.min[1].css"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\chrome.min[1].css.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\chrome.min[1].css.masked"), dwFlags=0x2) returned 1 [0257.053] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\chrome_throbber_fast_16[1].gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\chrome_throbber_fast_16[1].gif"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\chrome_throbber_fast_16[1].gif.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\chrome_throbber_fast_16[1].gif.masked"), dwFlags=0x2) returned 1 [0257.057] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\collect[1].gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\collect[1].gif"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\collect[1].gif.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\collect[1].gif.masked"), dwFlags=0x2) returned 1 [0257.063] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\ContainerTag[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\containertag[1].js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\ContainerTag[1].js.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\containertag[1].js.masked"), dwFlags=0x2) returned 1 [0257.127] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\eula-mac[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\eula-mac[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\eula-mac[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\eula-mac[1].jpg.masked"), dwFlags=0x2) returned 1 [0257.219] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\ga[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\ga[1].js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\ga[1].js.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\ga[1].js.masked"), dwFlags=0x2) returned 1 [0257.241] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\modernizr[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\modernizr[1].js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\modernizr[1].js.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\modernizr[1].js.masked"), dwFlags=0x2) returned 1 [0257.249] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\MSNIdSync[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\msnidsync[1].js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\MSNIdSync[1].js.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\msnidsync[1].js.masked"), dwFlags=0x2) returned 1 [0257.282] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\player[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\player[1].js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\player[1].js.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\player[1].js.masked"), dwFlags=0x2) returned 1 [0257.309] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\player[2].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\player[2].js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\player[2].js.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\player[2].js.masked"), dwFlags=0x2) returned 1 [0257.313] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\tecjslog[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\tecjslog[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\tecjslog[1].png.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\tecjslog[1].png.masked"), dwFlags=0x2) returned 1 [0257.318] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\th[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\th[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\th[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\th[1].jpg.masked"), dwFlags=0x2) returned 1 [0257.771] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\index.dat"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\index.dat.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\index.dat.masked"), dwFlags=0x2) returned 1 [0257.779] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\*", lpFindFileData=0x38902c | out: lpFindFileData=0x38902c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4f090c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xed24c730, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xed24c730, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555ea0 [0257.844] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\0ff92924-f857-491e-a2ee-c0fe20f0d064[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\0ff92924-f857-491e-a2ee-c0fe20f0d064[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\0ff92924-f857-491e-a2ee-c0fe20f0d064[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\0ff92924-f857-491e-a2ee-c0fe20f0d064[1].jpg.masked"), dwFlags=0x2) returned 1 [0257.908] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\26158[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\26158[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\26158[1].png.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\26158[1].png.masked"), dwFlags=0x2) returned 1 [0257.932] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AA42x3V[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aa42x3v[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AA42x3V[1].png.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aa42x3v[1].png.masked"), dwFlags=0x2) returned 1 [0257.938] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AA58NQj[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aa58nqj[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AA58NQj[1].png.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aa58nqj[1].png.masked"), dwFlags=0x2) returned 1 [0257.942] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AA61Ofl[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aa61ofl[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AA61Ofl[1].png.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aa61ofl[1].png.masked"), dwFlags=0x2) returned 1 [0257.977] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AA6SFRQ[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aa6sfrq[2].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AA6SFRQ[2].png.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aa6sfrq[2].png.masked"), dwFlags=0x2) returned 1 [0257.997] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAa1vhm[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aaa1vhm[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAa1vhm[1].png.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aaa1vhm[1].png.masked"), dwFlags=0x2) returned 1 [0258.002] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAa1xJF[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aaa1xjf[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAa1xJF[1].png.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aaa1xjf[1].png.masked"), dwFlags=0x2) returned 1 [0258.023] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAlG41q[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aalg41q[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAlG41q[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aalg41q[1].jpg.masked"), dwFlags=0x2) returned 1 [0258.059] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAmin0Z[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aamin0z[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAmin0Z[1].png.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aamin0z[1].png.masked"), dwFlags=0x2) returned 1 [0258.078] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAnhRyj[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aanhryj[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAnhRyj[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aanhryj[1].jpg.masked"), dwFlags=0x2) returned 1 [0258.118] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\adex[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\adex[1].js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\adex[1].js.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\adex[1].js.masked"), dwFlags=0x2) returned 1 [0258.235] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\adsWrapperMSNI[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\adswrappermsni[1].js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\adsWrapperMSNI[1].js.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\adswrappermsni[1].js.masked"), dwFlags=0x2) returned 1 [0258.407] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\ae8e984b-1820-4a8d-93dc-392ed6563fb6[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\ae8e984b-1820-4a8d-93dc-392ed6563fb6[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\ae8e984b-1820-4a8d-93dc-392ed6563fb6[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\ae8e984b-1820-4a8d-93dc-392ed6563fb6[1].jpg.masked"), dwFlags=0x2) returned 1 [0258.662] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\ast[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\ast[1].js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\ast[1].js.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\ast[1].js.masked"), dwFlags=0x2) returned 1 [0258.715] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\autotrack[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\autotrack[1].js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\autotrack[1].js.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\autotrack[1].js.masked"), dwFlags=0x2) returned 1 [0258.753] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BB56XTo[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bb56xto[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BB56XTo[1].png.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bb56xto[1].png.masked"), dwFlags=0x2) returned 1 [0258.785] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BB5vO0g[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bb5vo0g[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BB5vO0g[1].png.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bb5vo0g[1].png.masked"), dwFlags=0x2) returned 1 [0258.861] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BB8AdqN[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bb8adqn[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BB8AdqN[1].png.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bb8adqn[1].png.masked"), dwFlags=0x2) returned 1 [0258.891] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBALZyp[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbalzyp[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBALZyp[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbalzyp[1].jpg.masked"), dwFlags=0x2) returned 1 [0258.898] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBImKp[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbimkp[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBImKp[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbimkp[1].jpg.masked"), dwFlags=0x2) returned 1 [0258.912] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBMGJo[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbmgjo[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBMGJo[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbmgjo[1].jpg.masked"), dwFlags=0x2) returned 1 [0258.917] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBMKDF[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbmkdf[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBMKDF[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbmkdf[1].jpg.masked"), dwFlags=0x2) returned 1 [0258.925] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBMQch[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbmqch[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBMQch[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbmqch[1].jpg.masked"), dwFlags=0x2) returned 1 [0258.992] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBMyVh[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbmyvh[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBMyVh[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbmyvh[1].jpg.masked"), dwFlags=0x2) returned 1 [0258.999] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBNAf7[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbnaf7[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBNAf7[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbnaf7[1].jpg.masked"), dwFlags=0x2) returned 1 [0259.005] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBNnTF[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbnntf[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBNnTF[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbnntf[1].jpg.masked"), dwFlags=0x2) returned 1 [0259.014] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBO4dZ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbo4dz[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBO4dZ[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbo4dz[1].jpg.masked"), dwFlags=0x2) returned 1 [0259.025] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBO8ow[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbo8ow[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBO8ow[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbo8ow[1].jpg.masked"), dwFlags=0x2) returned 1 [0259.032] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBOaeS[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbboaes[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBOaeS[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbboaes[1].jpg.masked"), dwFlags=0x2) returned 1 [0259.038] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBOcIb[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbocib[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBOcIb[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbocib[1].jpg.masked"), dwFlags=0x2) returned 1 [0259.046] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBOddp[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbboddp[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBOddp[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbboddp[1].jpg.masked"), dwFlags=0x2) returned 1 [0259.073] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBOmar[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbomar[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBOmar[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbomar[1].jpg.masked"), dwFlags=0x2) returned 1 [0259.158] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBR4yQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbr4yq[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBR4yQ[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbr4yq[1].jpg.masked"), dwFlags=0x2) returned 1 [0259.225] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBUPaj[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbupaj[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBUPaj[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbupaj[1].jpg.masked"), dwFlags=0x2) returned 1 [0259.278] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBVEOW[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbveow[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBVEOW[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbveow[1].jpg.masked"), dwFlags=0x2) returned 1 [0259.285] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBVLcG[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbvlcg[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBVLcG[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbvlcg[1].jpg.masked"), dwFlags=0x2) returned 1 [0259.293] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBVSkP[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbvskp[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBVSkP[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbvskp[1].jpg.masked"), dwFlags=0x2) returned 1 [0259.431] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBYfEH[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbyfeh[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBYfEH[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbyfeh[1].jpg.masked"), dwFlags=0x2) returned 1 [0259.437] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBZ5vT[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbz5vt[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBZ5vT[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbz5vt[1].jpg.masked"), dwFlags=0x2) returned 1 [0259.444] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC02Gr[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc02gr[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC02Gr[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc02gr[1].jpg.masked"), dwFlags=0x2) returned 1 [0259.449] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC02Gr[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc02gr[2].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC02Gr[2].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc02gr[2].jpg.masked"), dwFlags=0x2) returned 1 [0259.454] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC03B1[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc03b1[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC03B1[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc03b1[1].jpg.masked"), dwFlags=0x2) returned 1 [0259.458] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC06Ub[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc06ub[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC06Ub[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc06ub[1].jpg.masked"), dwFlags=0x2) returned 1 [0259.463] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0Djg[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc0djg[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0Djg[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc0djg[1].jpg.masked"), dwFlags=0x2) returned 1 [0259.469] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0g7a[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc0g7a[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0g7a[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc0g7a[1].jpg.masked"), dwFlags=0x2) returned 1 [0259.474] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0lf2[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc0lf2[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0lf2[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc0lf2[1].jpg.masked"), dwFlags=0x2) returned 1 [0259.484] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0mK1[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc0mk1[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0mK1[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc0mk1[1].jpg.masked"), dwFlags=0x2) returned 1 [0259.495] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0qlB[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc0qlb[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0qlB[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc0qlb[1].jpg.masked"), dwFlags=0x2) returned 1 [0259.679] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBE7KPZ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbe7kpz[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBE7KPZ[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbe7kpz[1].jpg.masked"), dwFlags=0x2) returned 1 [0259.755] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBE8IlA[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbe8ila[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBE8IlA[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbe8ila[1].jpg.masked"), dwFlags=0x2) returned 1 [0259.957] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBE972F[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbe972f[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBE972F[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbe972f[1].jpg.masked"), dwFlags=0x2) returned 1 [0260.066] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBE9tdx[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbe9tdx[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBE9tdx[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbe9tdx[1].jpg.masked"), dwFlags=0x2) returned 1 [0260.085] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEdrqt[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbedrqt[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEdrqt[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbedrqt[1].jpg.masked"), dwFlags=0x2) returned 1 [0260.102] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeEwt[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeeewt[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeEwt[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeeewt[1].jpg.masked"), dwFlags=0x2) returned 1 [0260.108] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeis3[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeeis3[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeis3[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeeis3[1].jpg.masked"), dwFlags=0x2) returned 1 [0260.140] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeKvV[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeekvv[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeKvV[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeekvv[1].jpg.masked"), dwFlags=0x2) returned 1 [0260.206] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeNd8[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeend8[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeNd8[1].png.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeend8[1].png.masked"), dwFlags=0x2) returned 1 [0260.226] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEewZB[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeewzb[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEewZB[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeewzb[1].jpg.masked"), dwFlags=0x2) returned 1 [0260.234] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeZ0k[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeez0k[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeZ0k[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeez0k[1].jpg.masked"), dwFlags=0x2) returned 1 [0260.293] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEf6s4[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbef6s4[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEf6s4[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbef6s4[1].jpg.masked"), dwFlags=0x2) returned 1 [0260.304] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfAc5[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefac5[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfAc5[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefac5[1].jpg.masked"), dwFlags=0x2) returned 1 [0260.320] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfgDi[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefgdi[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfgDi[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefgdi[1].jpg.masked"), dwFlags=0x2) returned 1 [0260.329] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfjuT[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefjut[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfjuT[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefjut[1].jpg.masked"), dwFlags=0x2) returned 1 [0260.351] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfkgi[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefkgi[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfkgi[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefkgi[1].jpg.masked"), dwFlags=0x2) returned 1 [0260.366] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfRKA[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefrka[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfRKA[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefrka[1].jpg.masked"), dwFlags=0x2) returned 1 [0260.381] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfRwv[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefrwv[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfRwv[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefrwv[1].jpg.masked"), dwFlags=0x2) returned 1 [0260.395] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfwtU[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefwtu[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfwtU[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefwtu[1].jpg.masked"), dwFlags=0x2) returned 1 [0260.402] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfY4X[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefy4x[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfY4X[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefy4x[1].jpg.masked"), dwFlags=0x2) returned 1 [0260.414] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEgD9f[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbegd9f[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEgD9f[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbegd9f[1].jpg.masked"), dwFlags=0x2) returned 1 [0260.419] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEgJfz[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbegjfz[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEgJfz[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbegjfz[1].jpg.masked"), dwFlags=0x2) returned 1 [0260.426] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEgsWA[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbegswa[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEgsWA[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbegswa[1].jpg.masked"), dwFlags=0x2) returned 1 [0260.432] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEgX5G[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbegx5g[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEgX5G[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbegx5g[1].jpg.masked"), dwFlags=0x2) returned 1 [0260.436] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBih5H[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbih5h[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBih5H[1].png.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbih5h[1].png.masked"), dwFlags=0x2) returned 1 [0260.440] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBmUxRK[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbmuxrk[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBmUxRK[1].png.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbmuxrk[1].png.masked"), dwFlags=0x2) returned 1 [0260.444] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBndhJA[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbndhja[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBndhJA[1].png.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbndhja[1].png.masked"), dwFlags=0x2) returned 1 [0260.480] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBoqF0J[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bboqf0j[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBoqF0J[1].png.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bboqf0j[1].png.masked"), dwFlags=0x2) returned 1 [0260.485] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBzjV9E[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbzjv9e[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBzjV9E[1].png.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbzjv9e[1].png.masked"), dwFlags=0x2) returned 1 [0260.668] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\benefits-1[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\benefits-1[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\benefits-1[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\benefits-1[1].jpg.masked"), dwFlags=0x2) returned 1 [0260.707] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\chartbeat[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\chartbeat[1].js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\chartbeat[1].js.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\chartbeat[1].js.masked"), dwFlags=0x2) returned 1 [0261.000] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\chrome-installer.min[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\chrome-installer.min[1].js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\chrome-installer.min[1].js.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\chrome-installer.min[1].js.masked"), dwFlags=0x2) returned 1 [0261.012] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\chrome_logo_2x[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\chrome_logo_2x[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\chrome_logo_2x[1].png.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\chrome_logo_2x[1].png.masked"), dwFlags=0x2) returned 1 [0261.015] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\close-icon[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\close-icon[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\close-icon[1].png.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\close-icon[1].png.masked"), dwFlags=0x2) returned 1 [0261.221] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\css[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\css[1].txt"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\css[1].txt.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\css[1].txt.masked"), dwFlags=0x2) returned 1 [0261.796] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\ebHtml5Banner[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\ebhtml5banner[1].js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\ebHtml5Banner[1].js.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\ebhtml5banner[1].js.masked"), dwFlags=0x2) returned 1 [0261.831] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\eula-win[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\eula-win[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\eula-win[1].jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\eula-win[1].jpg.masked"), dwFlags=0x2) returned 1 [0261.975] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\jquery-1.11.1.min[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\jquery-1.11.1.min[1].js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\jquery-1.11.1.min[1].js.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\jquery-1.11.1.min[1].js.masked"), dwFlags=0x2) returned 1 [0261.992] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\rpc_shindig_random[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\rpc_shindig_random[1].js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\rpc_shindig_random[1].js.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\rpc_shindig_random[1].js.masked"), dwFlags=0x2) returned 1 [0262.294] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\wc-addons[1].css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\wc-addons[1].css"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\wc-addons[1].css.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\wc-addons[1].css.masked"), dwFlags=0x2) returned 1 [0262.315] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\MSIMGSIZ.DAT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\msimgsiz.dat"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\MSIMGSIZ.DAT.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\msimgsiz.dat.masked"), dwFlags=0x2) returned 1 [0262.322] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\*", lpFindFileData=0x38a2f4 | out: lpFindFileData=0x38a2f4*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xefd97750, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xefd97750, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e20 [0262.324] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\*", lpFindFileData=0x389990 | out: lpFindFileData=0x389990*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xefd97750, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xefd97750, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e60 [0262.328] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\*", lpFindFileData=0x38902c | out: lpFindFileData=0x38902c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xefd97750, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xefd97750, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555ea0 [0262.332] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\5p5NrGJn0jS HALPmcxz\\*", lpFindFileData=0x3886c8 | out: lpFindFileData=0x3886c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xefdbd8b0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xefdbd8b0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555ee0 [0262.335] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\*", lpFindFileData=0x387d64 | out: lpFindFileData=0x387d64*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xefdbd8b0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xefdbd8b0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555f20 [0262.339] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\*", lpFindFileData=0x387400 | out: lpFindFileData=0x387400*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xefdbd8b0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xefdbd8b0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x15, cFileName=".", cAlternateFileName="")) returned 0x555f60 [0262.343] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\*", lpFindFileData=0x386a9c | out: lpFindFileData=0x386a9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xefdbd8b0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xefdbd8b0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x15, cFileName=".", cAlternateFileName="")) returned 0x555fa0 [0262.346] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\*", lpFindFileData=0x386138 | out: lpFindFileData=0x386138*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xefde3a10, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xefde3a10, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555fe0 [0262.349] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE\\*", lpFindFileData=0x3857d4 | out: lpFindFileData=0x3857d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xefde3a10, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xefde3a10, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x556020 [0262.351] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE\\Low\\*", lpFindFileData=0x384e70 | out: lpFindFileData=0x384e70*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xefde3a10, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xefde3a10, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x556060 [0262.356] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Themes\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd8d1fc80, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xefde3a10, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xefde3a10, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0262.361] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\WER\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xefde3a10, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xefde3a10, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0262.364] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\WER\\ERC\\*", lpFindFileData=0x38a2f4 | out: lpFindFileData=0x38a2f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xefe09b70, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xefe09b70, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e20 [0262.366] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\WER\\ReportArchive\\*", lpFindFileData=0x38a2f4 | out: lpFindFileData=0x38a2f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xefe09b70, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xefe09b70, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e20 [0262.368] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\WindowsUpdate.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\windowsupdate.log"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\WindowsUpdate.log.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\windowsupdate.log.masked"), dwFlags=0x2) returned 1 [0262.377] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xefe2fcd0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xefe2fcd0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0262.379] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xefe2fcd0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xefe2fcd0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0262.383] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\old\\*", lpFindFileData=0x38a2f4 | out: lpFindFileData=0x38a2f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xefe2fcd0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xefe2fcd0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x80, cFileName=".", cAlternateFileName="")) returned 0x555e20 [0263.139] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\old\\edb00001.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\backup\\old\\edb00001.log"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\old\\edb00001.log.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\backup\\old\\edb00001.log.masked"), dwFlags=0x2) returned 1 [0263.160] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\old\\WindowsMail.pat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\backup\\old\\windowsmail.pat"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\old\\WindowsMail.pat.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\backup\\old\\windowsmail.pat.masked"), dwFlags=0x2) returned 1 [0263.794] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\edb.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\edb.log"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\edb.log.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\edb.log.masked"), dwFlags=0x2) returned 1 [0264.340] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\edb00001.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\edb00001.log"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\edb00001.log.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\edb00001.log.masked"), dwFlags=0x2) returned 1 [0264.344] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\oeold.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\oeold.xml"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\oeold.xml.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\oeold.xml.masked"), dwFlags=0x2) returned 1 [0264.349] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf10eea10, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xf10eea10, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x59, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0264.353] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\bears.jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\bears.jpg.masked"), dwFlags=0x2) returned 1 [0264.382] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\garden.jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\garden.jpg.masked"), dwFlags=0x2) returned 1 [0264.393] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\GreenBubbles.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\greenbubbles.jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\GreenBubbles.jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\greenbubbles.jpg.masked"), dwFlags=0x2) returned 1 [0264.401] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\HandPrints.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\handprints.jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\HandPrints.jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\handprints.jpg.masked"), dwFlags=0x2) returned 1 [0264.412] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\OrangeCircles.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\orangecircles.jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\OrangeCircles.jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\orangecircles.jpg.masked"), dwFlags=0x2) returned 1 [0264.421] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\peacock.jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\peacock.jpg.masked"), dwFlags=0x2) returned 1 [0264.427] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\roses.jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\roses.jpg.masked"), dwFlags=0x2) returned 1 [0264.435] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\ShadesOfBlue.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\shadesofblue.jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\ShadesOfBlue.jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\shadesofblue.jpg.masked"), dwFlags=0x2) returned 1 [0264.450] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\SoftBlue.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\softblue.jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\SoftBlue.jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\softblue.jpg.masked"), dwFlags=0x2) returned 1 [0264.462] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\stars.jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.jpg.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\stars.jpg.masked"), dwFlags=0x2) returned 1 [0264.464] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\WindowsMail.pat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\windowsmail.pat"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\WindowsMail.pat.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\windowsmail.pat.masked"), dwFlags=0x2) returned 1 [0264.470] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Media\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf121f510, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xf121f510, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x59, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0264.474] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Media\\12.0\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf121f510, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xf121f510, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x59, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0264.476] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Media\\12.0\\WMSDKNS.DTD" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows media\\12.0\\wmsdkns.dtd"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Media\\12.0\\WMSDKNS.DTD.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows media\\12.0\\wmsdkns.dtd.masked"), dwFlags=0x2) returned 1 [0264.490] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Media\\12.0\\WMSDKNS.XML" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows media\\12.0\\wmsdkns.xml"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Media\\12.0\\WMSDKNS.XML.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows media\\12.0\\wmsdkns.xml.masked"), dwFlags=0x2) returned 1 [0264.497] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Sidebar\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf1245670, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xf1245670, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x59, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0264.501] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf126b7d0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xf126b7d0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x59, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0264.505] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft Help\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe80ff230, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xf126b7d0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xf126b7d0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x59, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0264.510] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xf126b7d0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xf126b7d0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x59, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0264.515] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xf1291930, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xf1291930, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x59, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0264.519] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xf1291930, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xf1291930, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x59, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0264.525] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\*", lpFindFileData=0x38a2f4 | out: lpFindFileData=0x38a2f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xf1291930, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xf1291930, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x59, cFileName=".", cAlternateFileName="")) returned 0x555e20 [0264.538] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\*", lpFindFileData=0x389990 | out: lpFindFileData=0x389990*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xf12b7a90, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xf12b7a90, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x59, cFileName=".", cAlternateFileName="")) returned 0x555e60 [0264.543] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\*", lpFindFileData=0x38902c | out: lpFindFileData=0x38902c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xf12b7a90, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xf12b7a90, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x59, cFileName=".", cAlternateFileName="")) returned 0x555ea0 [0264.547] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\98\\*", lpFindFileData=0x3886c8 | out: lpFindFileData=0x3886c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb8c39470, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xf12ddbf0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xf12ddbf0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x59, cFileName=".", cAlternateFileName="")) returned 0x555ee0 [0264.552] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\A8\\*", lpFindFileData=0x3886c8 | out: lpFindFileData=0x3886c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81eff750, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xf12ddbf0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xf12ddbf0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x59, cFileName=".", cAlternateFileName="")) returned 0x555ee0 [0264.556] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\*", lpFindFileData=0x38902c | out: lpFindFileData=0x38902c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xf12ddbf0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xf12ddbf0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x59, cFileName=".", cAlternateFileName="")) returned 0x555ea0 [0264.564] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\0B\\*", lpFindFileData=0x3886c8 | out: lpFindFileData=0x3886c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7680bb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xf12ddbf0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xf12ddbf0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x59, cFileName=".", cAlternateFileName="")) returned 0x555ee0 [0264.568] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\C2\\*", lpFindFileData=0x3886c8 | out: lpFindFileData=0x3886c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826bbed0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xf1303d50, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xf1303d50, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x59, cFileName=".", cAlternateFileName="")) returned 0x555ee0 [0264.571] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\F6\\*", lpFindFileData=0x3886c8 | out: lpFindFileData=0x3886c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7d7ec50, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xf1303d50, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xf1303d50, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x59, cFileName=".", cAlternateFileName="")) returned 0x555ee0 [0264.575] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\2\\*", lpFindFileData=0x38902c | out: lpFindFileData=0x38902c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xf1303d50, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xf1303d50, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x59, cFileName=".", cAlternateFileName="")) returned 0x555ea0 [0264.579] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\*", lpFindFileData=0x38902c | out: lpFindFileData=0x38902c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xf1329eb0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xf1329eb0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x59, cFileName=".", cAlternateFileName="")) returned 0x555ea0 [0264.583] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\4B\\*", lpFindFileData=0x3886c8 | out: lpFindFileData=0x3886c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb727c690, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xf1329eb0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xf1329eb0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x59, cFileName=".", cAlternateFileName="")) returned 0x555ee0 [0264.587] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\4\\*", lpFindFileData=0x38902c | out: lpFindFileData=0x38902c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xf1329eb0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xf1329eb0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x59, cFileName=".", cAlternateFileName="")) returned 0x555ea0 [0264.591] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\5\\*", lpFindFileData=0x38902c | out: lpFindFileData=0x38902c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xf1329eb0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xf1329eb0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x59, cFileName=".", cAlternateFileName="")) returned 0x555ea0 [0264.594] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\6\\*", lpFindFileData=0x38902c | out: lpFindFileData=0x38902c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xf1350010, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xf1350010, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x59, cFileName=".", cAlternateFileName="")) returned 0x555ea0 [0264.599] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\7\\*", lpFindFileData=0x38902c | out: lpFindFileData=0x38902c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xf1350010, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xf1350010, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x59, cFileName=".", cAlternateFileName="")) returned 0x555ea0 [0264.602] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\8\\*", lpFindFileData=0x38902c | out: lpFindFileData=0x38902c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xf1350010, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xf1350010, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x59, cFileName=".", cAlternateFileName="")) returned 0x555ea0 [0264.615] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\*", lpFindFileData=0x38902c | out: lpFindFileData=0x38902c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xf1376170, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xf1376170, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x59, cFileName=".", cAlternateFileName="")) returned 0x555ea0 [0264.619] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\10\\*", lpFindFileData=0x3886c8 | out: lpFindFileData=0x3886c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7f47cd0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xf1376170, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xf1376170, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x59, cFileName=".", cAlternateFileName="")) returned 0x555ee0 [0264.622] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\2C\\*", lpFindFileData=0x3886c8 | out: lpFindFileData=0x3886c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7d58af0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xf1376170, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xf1376170, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x59, cFileName=".", cAlternateFileName="")) returned 0x555ee0 [0264.626] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\61\\*", lpFindFileData=0x3886c8 | out: lpFindFileData=0x3886c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7f47cd0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xf139c2d0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xf139c2d0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x59, cFileName=".", cAlternateFileName="")) returned 0x555ee0 [0264.630] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\E0\\*", lpFindFileData=0x3886c8 | out: lpFindFileData=0x3886c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e8d330, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xf139c2d0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xf139c2d0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x59, cFileName=".", cAlternateFileName="")) returned 0x555ee0 [0264.634] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\A\\*", lpFindFileData=0x38902c | out: lpFindFileData=0x38902c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xf139c2d0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xf139c2d0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x59, cFileName=".", cAlternateFileName="")) returned 0x555ea0 [0264.638] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\B\\*", lpFindFileData=0x38902c | out: lpFindFileData=0x38902c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xf139c2d0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xf139c2d0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x59, cFileName=".", cAlternateFileName="")) returned 0x555ea0 [0264.642] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\*", lpFindFileData=0x38902c | out: lpFindFileData=0x38902c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xf13c2430, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xf13c2430, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x59, cFileName=".", cAlternateFileName="")) returned 0x555ea0 [0264.646] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\E6\\*", lpFindFileData=0x3886c8 | out: lpFindFileData=0x3886c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7eaf750, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xf13c2430, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xf13c2430, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x59, cFileName=".", cAlternateFileName="")) returned 0x555ee0 [0264.650] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\*", lpFindFileData=0x38902c | out: lpFindFileData=0x38902c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xf13c2430, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xf13c2430, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x59, cFileName=".", cAlternateFileName="")) returned 0x555ea0 [0264.654] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\08\\*", lpFindFileData=0x3886c8 | out: lpFindFileData=0x3886c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e671d0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xf13c2430, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xf13c2430, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x59, cFileName=".", cAlternateFileName="")) returned 0x555ee0 [0264.658] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\*", lpFindFileData=0x38902c | out: lpFindFileData=0x38902c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xf13e8590, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xf13e8590, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x59, cFileName=".", cAlternateFileName="")) returned 0x555ea0 [0264.661] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\69\\*", lpFindFileData=0x3886c8 | out: lpFindFileData=0x3886c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7f6de30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xf13e8590, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xf13e8590, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x59, cFileName=".", cAlternateFileName="")) returned 0x555ee0 [0264.666] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\*", lpFindFileData=0x38902c | out: lpFindFileData=0x38902c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xf13e8590, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xf13e8590, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x59, cFileName=".", cAlternateFileName="")) returned 0x555ea0 [0264.670] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\23\\*", lpFindFileData=0x3886c8 | out: lpFindFileData=0x3886c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7f6de30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xf140e6f0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xf140e6f0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x59, cFileName=".", cAlternateFileName="")) returned 0x555ee0 [0264.674] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\F0\\*", lpFindFileData=0x3886c8 | out: lpFindFileData=0x3886c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82329dd0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xf140e6f0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xf140e6f0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x59, cFileName=".", cAlternateFileName="")) returned 0x555ee0 [0264.679] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\OfflineCache\\*", lpFindFileData=0x389990 | out: lpFindFileData=0x389990*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xbece2650, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xf140e6f0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xf140e6f0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x59, cFileName=".", cAlternateFileName="")) returned 0x555e60 [0265.138] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\OfflineCache\\index.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\offlinecache\\index.sqlite"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\OfflineCache\\index.sqlite.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\offlinecache\\index.sqlite.masked"), dwFlags=0x2) returned 1 [0265.147] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\*", lpFindFileData=0x389990 | out: lpFindFileData=0x389990*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8234ff30, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xf1885030, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xf1885030, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x59, cFileName=".", cAlternateFileName="")) returned 0x555e60 [0265.151] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\startupCache\\*", lpFindFileData=0x389990 | out: lpFindFileData=0x389990*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x807f0230, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xf1885030, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xf1885030, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x59, cFileName=".", cAlternateFileName="")) returned 0x555e60 [0265.155] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\*", lpFindFileData=0x389990 | out: lpFindFileData=0x389990*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb653ec30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xf18ab190, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xf18ab190, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x59, cFileName=".", cAlternateFileName="")) returned 0x555e60 [0265.173] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\4cc87c1409819bf06f42b782d4902b2f.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\4cc87c1409819bf06f42b782d4902b2f.png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\4cc87c1409819bf06f42b782d4902b2f.png.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\4cc87c1409819bf06f42b782d4902b2f.png.masked"), dwFlags=0x2) returned 1 [0265.192] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ba182bcd131f1f3c6b6fbbb1ba078341.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\ba182bcd131f1f3c6b6fbbb1ba078341.png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ba182bcd131f1f3c6b6fbbb1ba078341.png.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\ba182bcd131f1f3c6b6fbbb1ba078341.png.masked"), dwFlags=0x2) returned 1 [0265.453] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ce8c0453589216a67cddb50284fbfe8d.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\ce8c0453589216a67cddb50284fbfe8d.png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ce8c0453589216a67cddb50284fbfe8d.png.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\ce8c0453589216a67cddb50284fbfe8d.png.masked"), dwFlags=0x2) returned 1 [0265.459] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\*", lpFindFileData=0x38b5bc | out: lpFindFileData=0x38b5bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7314c10, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xf1b7ebb0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xf1b7ebb0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x59, cFileName=".", cAlternateFileName="")) returned 0x555da0 [0265.464] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\*", lpFindFileData=0x38ac58 | out: lpFindFileData=0x38ac58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7314c10, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xf1b7ebb0, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xf1b7ebb0, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x59, cFileName=".", cAlternateFileName="")) returned 0x555de0 [0265.468] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\active-update.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\active-update.xml"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\active-update.xml.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\active-update.xml.masked"), dwFlags=0x2) returned 1 [0265.472] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\*", lpFindFileData=0x38a2f4 | out: lpFindFileData=0x38a2f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb74b7b30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xf1ba4d10, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xf1ba4d10, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x59, cFileName=".", cAlternateFileName="")) returned 0x555e20 [0265.476] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\0\\*", lpFindFileData=0x389990 | out: lpFindFileData=0x389990*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb74b7b30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xf1ba4d10, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xf1ba4d10, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x59, cFileName=".", cAlternateFileName="")) returned 0x555e60 [0265.477] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\updates.xml"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates.xml.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\updates.xml.masked"), dwFlags=0x2) returned 1 [0265.481] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\*", lpFindFileData=0x38bf20 | out: lpFindFileData=0x38bf20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf1bcae70, ftLastAccessTime.dwHighDateTime=0x1d5882d, ftLastWriteTime.dwLowDateTime=0xf1bcae70, ftLastWriteTime.dwHighDateTime=0x1d5882d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x545568, dwReserved1=0x59, cFileName=".", cAlternateFileName="")) returned 0x555d60 [0265.526] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\4MQaw0.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\4mqaw0.wav"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\4MQaw0.wav.masked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\4mqaw0.wav.masked"), dwFlags=0x2) returned 1